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ITS I C D 


Date of transcription 09/21/2015 


fUZ /FOLIO l On September 14, 2015, 


social security number 

Investigation (FBI) Special Agent (SA)j_ 


Platte River Networks, date of birth 


was intervi ewed by Federal Bureau of 


and SA : 


for the intervi ew was Department of Justice (DOJ) Attorney 
attorney at the 


and 


Also present 


nature of the interview] 


Afte r being advised of the identity of the interviewing agents and the 
provided the following: 


(U/ /F00 6) As 


general role with the client and not involved with technical details, 
general direction of the business. 


described his role at PRN as a 


main concern is the 


(U//FOUO) Platte River Networks (P RN) work ed with an individual named 


identify business opportunities. In early 20 1 3 


to 


brought them a client opportunity who she claimed 
once worked as a public official. After submitting a bid to do the work, PRN became aware the contract 
they were bidding on was for the management of an email server hosting domains associated with BILL 
CLINTON, HILLARY CLINTON and their aides. PRN won the bid for the contract and the account was 
under the name CESC. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


(U/ /FOfjQ') PRN wanted to limit the employees working on the C ESC server, so it was 


determined [ who worked remotely on the server, andj 


who 


was aware 


handled the server on-site, would be the technical team doing most of the work, 
that PRN picked up an old server from the CLINTON residence and delivered it to Equinix, a datacenter 
in Secaucus, New Jersey. PRN ordered and installed new server ha rdware at Equin ix and migrated all 
CESC email from their old server to the new PRN provided server. ! I was aware that PRN 

maintained a back-up of the server known as a DATTO. The DATTO was located at Equinix and worked 
by taking snapsh ots of the server and mai ntaining tha t data for un to 6 0 days before it was deleted. 


leferred to for specifics 

Enterprise Server managed by PRN, but deferred to 


|was also aware of a BlackBerry 


on the specifics. 


(U/ /FOUO ) In or around March 2015 


was involved in conversations with CESC 


where they req ue sted to know wh at email they had, where it was, and how it was backed up. 

and handled this request and would know more details. CESC never asked 
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On 07/23/2015 . Page 


for administrator rights to the PRN server or for physical access to the server at Equinix, 
believed CESC was still a PRN client and were operating under the same contract they originally signed. 


(U/ /FOUB ) 


CESC email server run by PRN. 


didn’t believe there was a successful intrusion attempt against the 


be 
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fU//FQt p On May 23 . 201 6, | | date ofbirthl | social 

secu rity numbed _ was interviewed b y Federal Bureau of Investigation (FBI) Special Agent 

(SAT l and SA at the offices of Platte River Networ ks (PRN) located a t 

5700 Washington Stre et. Denver. Colorad o 80216. Also prese nt for the interview was 

and via speaker phone I both attorneys at the I Afte r being advised of 

the identity of the interviewing agents and the nature of the interview, [ provided the 

following information: 

(U//TOUO) was not aware of a laptop containin g an archive of e mail belonging to 

HILLARY CLINTON that was shipped to PRN around February 2014. was not aware 

what became of the foregoing laptop. 

(U//FOUO)| only recently was made aware of a CLINTON email archive file being 




(U//TOUO)| |only recently was made aware of a CLINTON email archive file being 

Executive Serv ices Corporation (CESC) around July 20 1 4 and September 2014 

as not aw are of the request by CESC, or transmittal by 

| [ as it w as occurring] was not aware of what specifically was requested by 

CESC or exactly how fulfilled the request. 


(U// FOUO) | [ I 

October 2014 to January 2015. 

shred their email records. As a 
technical details of any PRN client. 


ifas not awa re of any support PRN provided the CESC client from 

was not aware of any CESC req uest to delete, wipe or 

would not pay attention to 


(U//FOUO) At this point in the inte rview. Agents displayed PRN provided records and email from 
the March 2015 timeframe | provided the following information: 

(U/ /FOUO) In March 2015, when various media outlets reported a private email domain and 
server was used by HILLARY CLINTON, PRN decided to cre ate an internal “ share drive” and control 
access to only the PRN employees working the CESC account. stated PRN did have back- 

ups of their own servers. PRN never deleted information pertaining to the CESC client and provided the 
FBI all records they maintained pertaining to CESC. 
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(U/ /FOU O) In March 20 1 5 j Istated CESC rea 

content, to include where it existed. PRN employee 

data center in Secuacus, New Jersey where the CESC server equips 
not a party to the discussion involving CESC 3 s request for inv entnl 
instructions] did not recall what spec:" 

(U/ /FOUO) After Agents di splayed an email dated March 
discussed preservation of materials, could not recal 

preserve CESC related data. 


On 07/23/2015 . Page 


1 their email 


I specific 
■r equipment. 

MILLS 
entity to 


(U/ /FOUO) l lh as no recollection of a conference call on March 25, 2015 or March 

31, 2015 with CESCL Istated CESC never re quested their em ail content by deleted, wiped 

or shredded. Recently, [vas made aware that| used Bleach bit software to 

shred .pst em ail files contain ing CESC email content that was transferred to CESC. As | 

understood it j Icre ated a “vehicle” to transfer email files from the live mailboxes of CESC 

email accounts. t hen later used Bleachbit software to shred the “vehicle” but the email 

content still existed in the live email accounts. 

(U//TOUO) was unaware of any PRN employee conducting manual deletions of 

the DATTO device used to back-up the CESC email server. 


(U/ / F OUO) 


was unaware of any successful computer intrusion of the CESC server. 


(U// FOUO) Notes of the interview and documents displayed tc 
in a FD340 envelope and filed with the captioned investigation. 


will be maintained 
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(U//F6W©) On April 19, 2016 
social security account nu mber fSSANl 
tFBP Special Agents fSA)[ 
llocated atf 


Jattorneysf 


and 


date of birth (DOB)| | and 

was interviewed bv Federal Bureau of I nvestigat ion 
at the law offices ofj_ 


interviewing Agents, and the nature of the interview. 


W ashington DC 20005. Also present for the interview were 
|and| I. After being advised of the identity of the 

provided the following information: 


oj /mm) 


is currently the£ 


|met President WILLIAM CLINTON 

Jat the White House in the fall oi l I After hisj^ 


and HILLARY -C LINTON when he became an 
served in various positions in 


the CLINTON White House and continued to work for President CLINTON after his presidency. 

(U// FOUO) In the years after President CLINTON left the White House, CLINTON’S staff 
managed certain details related to the information* technology needs of CLINTON’S office. One of those 
needs required negotiating with an individual who owned several .com domains related to CLINTON’S 
name. | I recalled these domains to be presidentclinton.com, clintonfoundation.com, and owjc.com. 

Ultimately, negotiations were successful and the domains were purchased from the individual. 

(U/ /FOUO) In 2006 or 2007, JUSTIN COO PER obta ined a private email server (Apple Server) 
for the office of President CLINTON. COOPER ant j ~| had several conversations about reliability 
issues related to the previous outsourced server and decided it would be best to have a server under their 
physical control at the CLINTON’S residence in New York. COOPER handled the procurement and all 
aspects o f serve r management, to include the creation of new accounts or any requests to move email. 


Lot server 
believed 


with H UM A A H TTP) 

Server. 


|initiallyhademaU^^ R ecalled a conversation 

BLuTN and COOPER regarding the addition of HILLARY CLINTON to the A pple 
] thought it was a bad idea, but the issue had been decided by that point in time, 
dition of HILLARY CLINTON to the Apple Server occurred while she was in the S 


believed the addition of HILLARY CLINTON to the Apple 
CLINTON used BlackBerry devices obtained by COOPER to access her email. 


Senate, 
was not involved 


in the decision to move to a new server (Exchange Server), but recalled it was located, as was the Apple' 
Server, in the basement of the CLINTON’S New York residence. 
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(U/ /FOUO^ COOPER notifieq 

system, bui could not recall any specific details. They shared a mutual concem[ 


few times each year about attempted i ntrusions of the 


had too much private information about the CLINTONS and may have had access to some of their 
communications. 


(U// FQUO ) | had no knowledge regarding the following topics: 


discussio ‘oi^iovet 







ge Server 

to move to the Exchange Server 
Exchange Server 


personnel involved ir 
domains on 
users on - Excha 

dispositft ifme Exchange Server after decommissioning 

classified information on Apptaflfrver or Exchange Server 

conversations concerning fed^^Be cords as it related to the Apple Server or Exchange Server 
backups of the Apple Server or Exchange Server . 

. Sensitive Compartmented Information Facilities at the CLINTON’S New York or Washington, 
DC residences did recall Secure Telephone Units in New York and Washington, DC) 


Secure fax machines or secure computers at the New York or Washington. DC residences 
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(U//F OUO) O n June 6. 2016. 


social secu rity number 
Ajgent (SA)[ 


date of birth 


w as interviewed by Feder al Bureau of Investigation (FBI) Special 
land SA at the FBI Washington Field Office, 601 


Street NW. Washington, DC 20535. Also present for the interview was FBI Intelligence Analyst 

[ After being advised of the identities of the interviewing agents and the purpose of the 

interview, "[provided the following information: 


(U/ /FOU 6) 


works for[ 


specializing in the areas of missile, space, and intelligence. In addition, 


a company focus ed on domestic data acquisitio n which] 


Jias several products to include 


from the over 60 billion records in 


possession. 


a def ense contracto r 


owns 


(established in 


as well as other p roducts drawn 

Dark Horse Data, 


Inc. (DHD), a company owned by former Deputy Under Secretary of Defense for Intelligence 
REGINALD HYDE. DHD works with foreign data, can contract directly with the government, and 
frequently embeds its personnel with clients. 


(U/ /FOUO) In June or July 201 5 J 


States Senate Committee on the Judiciary, contacted 

CLINTON’S email server might end up overseas. Specifically 

was an intrusio n into CLIN TON’S server and, if so, whether exfiltrated data fell into the hands of a 


a senior staff member of the United 
[out of conce rns data from HILLARY 


[wanted to determine if there 


foreign power. 
Marines. Addi 
Therefore] 


ional 


comprom ised. 


5 


was concerned any exfiltrated data could endanger her three sons, who are 


y, sh e was unset as a citizen and Senate Staff Member that this situation could occur. 


asked 


if it was possible to determine if CLINTON’S server had been 


jstated he would have to look for data that was genuine, authentic, and relevant. 


defined those three terms as follows: 


Genuine - data originating from CLINTON’S server 
Authentic - data that had not been altered 

Relevant - data from CLINTON’S server that was moved outside of the United States to a place 
where a foreign actor could access it 


(U/ /FOUO) Sincel 


September 2015 she met with NEW' 


did not have funding fo r the projec t described above, in August or 


GINGRICH and asked 


no brief GINGRICH on the project. 
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. On 06/06/2016. Page 


GINGRICH, and 


were all bothered by the potential that data from CLINTON’S 
server had been compromised GINGRICH wanted t o sneak with oth ers about the proje ct and in 


December 2015, recommended 
the project as four phases to 


speak with 


% 


Judicial Watch. 


The phases were to determine if: 


briefed 


Phase 1 -CLINTON’S server was directly or indirectly attacked 

Phase 2 -SIDNEY BLUMENTHAL’s server was directly or indirectly attacked 

Phase 3 — data was exfiltrated outside the United States 

Phase 4 - data was exposed to a foreign actor 


Ad 


briefed the project, he raised the question of what the course of action would be if classified 
informatio n was unco vered. The three discussed it and decided Judicial Watch’s legal counsel should be 
consulted. 


never received an answer, but was of the opinion that if he uncovered data he 


thought might be classified, he would be obligated to report it to the appropriate authorities. 

(U//FOUO) In January or February 2016, Judicial Watch’s legal counsel advised the project was 
feasible, but could not involve accessing any systems without authorization. The project could review 
open s ource data following the four phases described above. After these initial discussions with Judicial 
Watchl Iconcluded the motivation of Judicial Watch’s actions was not centered on the elections. 


(U/ /FOUO) 


advised there are three potential funding streams for the types of projects 


his company undertakes. They can be funded by his company, a government contract, or a data 
arbitrageur. In this situation, the arbitrageur would invest in litigation on the prospect of a judge awarding 
the arbitrageur attorney’s fees. 


(U//FOUO) In February or March 2016, 


company, 


Watch to proceed with Phase 1. Judicial Watch awarded the contract tel 


was gi ven $32,000 by Judicial 
becaus e they were 

trad to 


confident he understood both the Deep Web and Dark Web. After receiving the contract, 
determine the best place to obtain the necessary data for the project. Based on the terms outlined by 
Judicial Watch’s counsel. C LINTO N and BLUME NTHAL’s respectiv e servers were offlimits, as were 


offshore servers. 


turned 


t 


a former executive at 


a cyber intelligence 


company which inges ts d ata from th e Deep Web and Dark Web and, then, indexes the data. By 


leveraging d ata. I c ould searc h the Deep W eb and D ark Web without exposing his 


searches to the Internet 


paid 


$2,500 to have 


conduct searches based on search 


terms provided by | These search terms included, but were not limited to, HILLARY 

CLINTON , SIDNEY BLUMENTAL- and an Inte rnet Proto col (IP) address range obtained from an email 
provided t d 


|by Judicial Watch. In return,) r 
which was the exclusive data source used bM 


provide d the results of those searches to 


Jor this project. 


(U/ /TOUO 


eviewed the data pr ovided by 


BLUMENTHAL’s server on a server in Romania. 


md found files from 

believed BLUMENTHAL had a personal 
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server because he found some of BLUMENTHAL’s files on the server in Romania, but not any of 
BLUMENTHAL’s emails. The Romanian server contained approximately 200 Microsoft Word, Excel, 
and other file types belonging to BLUMENTHAL. 


(U//FOUO) In ref erence to a M ay 22, 2009 alleg ed intrusion of CLINTON’S server appearing in a 


draft version of a report on[ 
hack or the specific date. 


project 


stated he could not recall where he learned of the 


pecula ted it was p ossibly from a public report, but he had looked for 


the source and could not find it. Therefore, 
iterations of the report. 


planned to remove the reference from future 


(U//FOUO) Duringl 


p review of the data obtained by 


1 j ie found one sensitive 

Excel file listing the names of known or suspected jihadists in Libya. | [added that a portion of the 

file was in Russian. The file did not come from BLUMENTHAL’s server, but contained a r eference to an 
IP address range that included the IP address of CLINTON’S server. Upon viewing this file, 


became concerned he had found a classified document and stopped the project. This work completed 
Phase 1 and planned to deliver the final report to Judicial Watch soon. 


(U//F OUO ), , 

2012, which was the same timeframe when[ 


stated some o f the BLUMENTHAL files were dat ed on or afr out January 

I contacted 


| regarding the 

Libyan Rogue Nation Judgment Recovery Program (LRNJRP). | [claimed he was hired 

bv the I.ih yan opposition government to recover the assets of the MUAMM AR GADDA FI government. 


Jalso met with TYLER DRUMHELLER regarding the same matter. 


speculated 


BLUMENTHAL, if involved in the LRNJRP, could have written the memos as a “shake and bake” tactic. 
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Date of transcription 09/2 1/2015 


On September 14, 20I5J 
Networks (PRN), date of birth 


social secu rity numberf 


Federal Bur eau of Investigation (FBI) Special Agent IS At 
Also present for the inter view waJ 
Department of Justice (DOJ) Attorney 


interviewing agents and the nature of the interview. 


After being 


frorrj 


land l 


Platte River 


w as interviewe d by 

saI 


T 


land 


advised of the identity of the 
Jprovided the following: 


od 


On or about January 2013. 
potential busines s with a h igh profile former government client. 


relationship with 


ftiig 

Jbei 


contacted 


egarding 


had an existing 


cause she previously referred other clients from a family wealth asset 


management firm. The potential client’s current email server architecture lost connecti vity during pypnt^ 
such as Hurricane Sandy, so they wanted better support than their existing arrangement. I 


menL. 
it tq_ 


Once 


with the assistance of other PRN personnel, put together a proposal and submitted 

PRN was chosen as one of the three finalists for the contract, PRN was notified the potential client was 
WILLIAM CLINTON and HILLARY CLINTON, doing busin ess through a com pany named CESC. 

After PRN won the q onftact] Itook on a sm aller role ant j worked primarily witl 

J CESC wanted to keep the number of individuals 


;ontrs 

land 


working on the project small, so PRN identified three people as the only personnel allowed to work - 
directly on the CESC Project. Those individuals were identified i n a Service Level Agreem ent (SLA) 
signed in Aug ust 2013 asl I ( solution design), | (project 


ma nager!, and 
and 


work at Equinix, while! 
work on the project. 


(help desk). 

handl ed approximate ly 10% of the work. 


did approximately 90% of the work for CESC 


handled everything else. 


Jrole was to help with on-site 
was ultimately not needed to 


When 


HILLARY CUNTON, 


^as_asked to review an ema il he sent discussing a new email address for 


state 


4 


could not answer the question for attorney-client 


privilege reasons. A copy of the email is attached to this communication in an FD-340. 

PRN chose Equinix as the datacenter for CESC’s new email server (hereafter, PRN server) 
specifically because it did not go down during Hurricane Sandy. This project was PRN’s first time using 


Equinix. 


transported CESC’s existing equipment (hereafter, predecessor server) and 


1^ I “ 1 N J i ■ 

transported it to tquimx, so the content of the predecessor server could be migrated to the new PRN 


server- 
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technical 


D-30?. r>f Interview nj | . On 09/14/2015 . Page 2 

stated PRN used an outside firm, MX Logic, for spam filtering, but referred other 
Stions, r egarding 1 snarn filtering, data migration, archives/backups, and Microsoft Exchange to 
end/or 



had no knowledge of: 


• Email servers used by CESC prior to the one transported by PRN to Equinix. 

• The existence of classified information on either server. 


• Discussions regarding federal records retention. 

• Intrusions to the PRN server. 
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Date of transcription 05/26/2016 


numbe: 


l 


U/ /TOUQ1 On May 23, 2016 


date of birthl 


was interviewed bv F ederal Bureau of Investigation ( 


social security 


and SA 


BI) Special Agent (S A) 


at the offices of Platte River Netwo rks fPRNl located a t 5700 
Washington St reet. Denver. Colo rado 80216. Also pr esent for the intervie w wa d and 


both attorneys at the) 


speaker phone. 

identity of the interviewing agents and the nature of the interview J 
information: 


via 


After bei ng advised of the 

provided the following 


(u/ /rouo £ 


|for PRN, and in that role, 

had contact with PRN client CLINTON E XECUTIVE SERVICES C O RPORATION fCESq t His points 
of contact at CESC were CHERYL MILLS, 


and 


(U//FOUOj| | was not aware of a laptop contain ing an archive of q mail belonging to 

HILLARY CLINTON that was shipped to PRN around February 20 1 4 ] was not aware 

what became of the foregoing laptop. 


(U //FOUO 
Clinton Executive 


, vas not aware of a CLINTON email archive being tra nsmitted to the 

Services Corporation (CESC) around July 2014 and September 2014 by 


shred their email records. 


(U//FOUO) 

was not aware of anv support PRN provided the CESC client from 

October 2014 to January 2015. 

|was not aware of any CESC request to delete, wipe or 
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(U/ /FQUQ) At this noint in the intei 
the March 2015 timeframe 


rview, Agents displayed PRN provided records and email from 
provided the following information: 


(U//FOUO) In March 2015, w hen various medi a outlets reported a private email domain and 


server used by HILLARY CLINTON, 
to conduct penetration t esting of the CESC emai l serve] 


from a company namedl 


I 


js ptertamed the idp of hiring a t hird party comn any 
recommended 


but the testing ultimately did not occur. 


he 

hlC 

he 

hlC 


Investigation on Q5/23/2Q16 


at 


Denver, Colorado 
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(U/ /FOUO ) In March 2015, recalled PRN employee 

to the Equinix data center, but did not know the purpose of the trip. 


ravelled 


(U/ /FOUO) After Agents d isplayed an emai dated March 09, 2015 where CHERYL MILLS 

discussed preservation of materials! could not recall any other request by any entity to 

preserve CESC related data recalled receiving some guidance by PRN attorneys to 

preserve data, but could not recall specifically. 


(U/ /TOU O)| 

March 31 .2015 with CE? 
PRN’s attorney, 
shredded. 


bad no rec ollection of a specific conference call on March 25, 2015 or 

did recall conference calls with CESC that were run by 

stated CESC never requested their email content by deleted, wiped or 


was unaware of any successful computer intrusion of the CESC 


server. 


(U//POUO) Notes of the interview and documents displayed tc 
in a FD340 envelope and filed with the captioned investigation. 


will be maintained 
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Dale of transcription 03/03/20 1 6 


(U/ /TOUO ) On F ebruary 4. 2016 
]nY, mobile phone 


home address 


was interviewed at the law offices of Bryan Cave LLP. 1 155 F 
Street NW Washi ngton. DC 20004 bv Fed eral Bureau of Investigation (F BI) Special Agen t (SM 


counsel. 


and SA[ 


Department of Justice attorney^ 






the interviewing agents and the nature of the interview. 


]were also present for th e interview . After being advised of the identity of 

provided the following: 


(U// TOUO) 


(CLINTO N) in 1 997 when he was assignedl 


first met Pre sident WILLIA M CLINTON and HI LLARY CLINTON 

o The White House asl 


At that time, 

received a securi ty cleara nce after a single scope background investigation was conducted. He 


served in The White Housel 
CLINTON left office. On I 


told 


accepted the offer and on 


their New York family. 

NY residence. For the first six months^ 

nrnvided tn every president who leaves office f 


Ito include traveling with the President , until 2001 when Presi dent 

President CLINTON’ sf 


Ithe C LINTONs had been kee ping an eve on him and would like him to join 

drove to their Chappaqua, 


I 


1 I I * * 1 ' 

I position was covered as part of the military assistance 


he primarily focused on 


He then returned to Chappaqua where 


but ended up with many more responsibilities. 


recalled an Apple server in the basement of the CLINTON’S Chappaqua 
hut do es not remember when it was installed or by whom. It was a big box to the right of 

(with no exte rnal devices attached, ho wever, it had an internal capability to backup data. 

HUM A ABEDIN,| | HILLARY CLINTON, II I STTN COO PF.R AND 


server as a workstation. 


pad email accounts under the owjc domain housed on the server 


also used the 


(U//FOWO) 


did not know of plans to install the server constructed by BRYAN 
PACtT TANO at the time it occurred. The server consisted of three thin black boxes mounted in a rack, 
described himself as not technical and, therefore, could not speak to any details regarding this 


server. 


b 6 
b7C 


b6 

b7C 


hS 

hlC 


hS 

hlC 


Investigation on 02/04/2016 at , 

[302 ~ w > 


Washington, DC 


File# 






Date dictated , 

»id k 


N/A 


This document contains neither recommendations nor conclusions of the FBI. ft is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Continuation of FD-302 of 

(U// FOUO) did not recall escorting anyone from Platte River Networks in June 2013 

into the Chappaqua residence to remove the server described above. 

(U//FOUO) HILLARY CLINTON’S office was on the third floor of the Chappaqua residence. 
After she became the Secretary of State, the State Department. (State) converted it into a sensitive 
cmnnartme nted information facility (SCIF). During the installation of the secure lines for the SCIF, 
stood at the door as an escort for the technicians. After that conversion, CLINTON was the 


b6 

b7C 

b6 

b7C 


only one who had the combination to access the office until it was decommissioned one tO ( two_weeks 
after her departure from State. It contained approximately three phones installed by State. 


b6 

b7C 


t at! 

white phone. |did not know the differences in the phones. The office al ^o containe d 

CLINTON’S non-secure desktop computer, a shredder, and a secure fax machine. initially 

stated he only entered the SCIF once or twice, when CLINTON was present, to remove trash. 


believed all three to he s ecure phones and described them as a black STU phone, a yellow pbone, and a 


(U/ /FOHO X 


later recalled a procedure established by ABED IN witn 


at the 


beginning of CLINTO N’S tenure &t State for situations when CLINTON needed assistance with the secure 


b6 

b7C 


fax. Wherj was notified by Sffte personnel of an incoming secure fax, he would locate 

CLINTON, follow her to the SCIF, and assist as needed with the incoming fax. He was never in the SCIF 
to receive a fax without CLINTON present and never physically picked up any of the documents 
received. If the tax was not working, State would sometimes send a courier wi th documents or a 


diplomatic pouch to the Chappaqua residence. On those occasions 

from the y ate to the door and the courier would hand the documents or pouch 
would also coordinate the repair of the fax when broken. 


jwould escort the courier 
directly to CLINTON. 


(U// FOUO) ABEDIN or CHERYL MILLS would sometimes notif>[ 


the Presidential 


Daily Brief (PDB) woul d be coming via secure fax to the residence. As described above with other 
secure faxes 


Jwould locate CLINTON a nd assist w ith the incoming secure fax. The PDB was 


also hand carried to the residence on occasion and would escort the courier to CLINTON. 


intended for CLIN' 


) 

perio 

TON. 



would print the documents and give them to CLINTON, but does not 


b6 

b7C 


b6 

b7C 


know what happened to the documents after CLINTON was finished with them. 
Unknown handled similar duties at CLINTON’S residence in Washington, DC. 


Last Name 


(U/ /FOUO) CLINTON had sev eral Black B errv devices over the course of time. When 


CLINTON had issues with one of them, 


would ask COOPER for advice on how to fix it. 


[believed CLINTON had a State BlackBerry, but did not recall a secure mobile phone. 

did not recall setting up an Apple ID or iPad for CLINTON. 


(U/ /FOUO ) 

(U/ /FOUO) 


pid not recall a secure phone in CLINTON’S bedroom. 
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Date of transcription 03/23/2016 


Chief Executive Officer (CEO) 


interviewed at his place of employme nt. 


and his email address is 


was 


telephone number is 


was advised that 


the FBI had identified 37 login attempts to the A PPLE I CLO UD account 


of hdr22@clintonemail . com, originating from three 


addresses 




was provided with the IP addresses that 


owned IP 
made the 


login attempts. After being advised of the identitie s of th^ 
interviewing Agents and the nature of the interview, 
the following information: 


provided 


he adquar t e ] ^s inf 
locations . 


La s approxima tely | [ employees at their main 


provide [ 


"l and an additional 


employees in other 
They 


including m ^nv DS 
components . 


has a large customer base 


f 


overnment agencies and Department of Defense 


1 


rovided the Agents with a demonstration of th^J 

| on a laptop in his office. 


b 6 
b7C 


b4 

b6 

b7C 


b3 


others . That data is then 


and 


b4 

b6 

b7C 


provides their clients with two basic services : 1 ) their 

security platform can be used to link and search f or current social 


b6 


media information on the Internet; and 2) 
social media monitoring for their c lients 


can provide on-going 
explained that the 


b7E 


utilizes their continuous 


b6 

b7C 

b3 

b7E 


b6 

b7C 


Investigation on 03/23/2016 
File n 


at 


By SM 


CYBER 


Date dictated 


N/A 
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bS 

b7C 


Interview 


»[ 


On Q3/23/20 1 6 . Page 


monitoring service to generate ale rts for new so cial medi a posts 


relating to current 
same service for al 
whether they are aware of it or not. 

Along with searching for 


Additionally, 


provides that b7c 

same service for all United States Department of Commerce employees, b7E 


b6 


1 confirmed that two of the three IP addresses shown to him 

belong to | stated that the third IP address may have 

bee n assigned to them in the past, but that it was no longer active. 
The I I is assigned to 


b4 

b6 

b7C 


b4 

b6 

b7C 



b4 

b6 

b7C 


field was displayed without a corresponding password field. 


To the best of 


recollection. 


I 


was not hired by 


attributed the login 


HILLARY CLINTON or anyone on her behalf. 

attempt^ to being _ conducted by one of their -clients, utilizing, the 


platform. 


order to verify that 


then left the interview for a brief moment in 
J was not conducting any contin uous 

monitoring services for HILL ARY CLIK TomL ''tfh^n he returned, 

confirmed that they are not. | [stated that he had a co-worker of 

his search for CLINTON'S nam e within their Pl atform. In order to 
protect the FBI's inquiry at J had the co-worker search 


for CLINTON'S name in the system, along with the names of two 
additional current Presidential candidates. The results were I negative 
on all three searches. 


b6 

b7C 
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On Q3/23/2016 . Page 


he 

hlC 


was then informed that the hdr22@clintonemail . com email 
account was published in NEW YORK TIMES article on March 02, 2015, 

and that the login attempts occurred on the following day. 

stated that this made sense to him. Given that information, he 

theorized that the login attempts were likely made by one of their 
"good guy" clients, possibly to conduct a damage assessment on the 
social media footprint associated with that email add ress. How ever. 

had no 


stated that he could not verify his theory, as 


additional data to corroborate it. 


be 

b7C 


is amenable to future contact with the FBI. 


be 

b7C 
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hS 

hlC 


| | recalled sharing se veral emails with PRN emp loyees regar ding 

clintonemail . com domain. [primarily dealt with[ but 


the _____ . 

remembered tha t the re were a couple of other PRN employees included on 
the exchanges. | "[ th en went to h is office and printed out several 
email between him and | Those printouts are enclosed for the 

file in a physical 1A envelope. 


never had access to the clintonemail . com domain 

nor do thev ho si 

: any of their company services on PRN networks. The 
interactions with PRN employees, related penetration 

extent of 

testing, and t 
exchanges that 

le clintonemail.com domain are documented in the email 

provided during this interview. 


(Identified 


.While reviewing the emails provided by | ~| SA 

nnp which references a public news article, where an individual named 


had utilized a scanning tool called FIERCE to 
identify the addre sses used for HILLARY CLINTO N'S (CLINTON'S) person al 
pmai 1 server. I Iprovided that the referenced 


provided that 


formerly 


managed an Internet blog where he posted new h acks and. exploits on 
almost a daily basis. A few years ago, however. 


discontinued publishing his fin dings on the Int ernet 


that 


community . 


goes by the name of 


within the 


went dark and 
provided 
hacking 


has known 


c 


for several years. 


recalled that 


a passion for music, 
business that put on large- scale rock concerts, which would rival t hat 


The two of them share 

a 


of a Madonna-sized concert. 
two share music as a common bond. Additionally 


recalled that 
a blimp company that provided aerial 


the 


coverage over large public events. 
recalled meeting 


which 


at a Colorado technical event , 
referred to the event as a leads 


event, which was a technical expo in Colorado where information 
technology experts coul d exchange ideas and network with one another. 


During that event, 

SECRET SERVICE Agent , named 
another pr ior to the event, 


spok e on a panel with 


and a US 


Purina introdu ctions with one 


Recalled USSS SA | | stating to 


that he had recently served a warrant at PRN. □ surmised 


that statement to relate to the on-going investigatio n of C 
email server. Agent Note: A follow-up call to USSS SA 


rINTON' s 
identified 


b6 
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b6 
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b6 
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b6 
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b6 
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On 04/12/2016. Page 


b6 

b7C 


warrant referenced in that conversation was served in support of 
different matter. 



| 

H ewa 



situ; 

it ion 


has 


as a "good guy", who is c aught in a bad 


has st ated his fru strations td 


regarding the 
stated that it has had a 


b6 

b7C 


CLINTON email investigation. < i 

direct impact on PRN's business, and that they have spent a large 
amount of ip onev in legal fees related to the matter. Primarily, 
is concerned over the negative publicity that PRN has 


received in the news media. Additionally, PRN has been asked to step 
out of certain requests for proposals (RFP' s) as a result of the 
investigation . 


In ad dition to 
with PRN'_s 
However, 


1 


has been 


has al so had limited interactions 
Last Name Unknown (LNU) . 


primary point of contact at PRN. 


When asked whether or not 


utilizes the 


social media cyber security product, 

| |j_s amenable to future contact with the FBI. 


stated that they do not 


b6 

b7C 


b6 

b7C 
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Date of transcriplion 1 i/24/2015 


int erviewed hv F^d^-r^l 
(SA) 


DAY 


date of birth (DOB) 

Rnr Pai) Of Tn wcl-ifial-inn 

and 


was 


at the law offices ol 

PITNEY located at One Canterbury Green, Stamfor d. CT n&Qm ai an 


(FBI) Special Agents 


present for the in terview were DAY PITNEY attorneys 


After being advised of the identit y oj 
interviewing Agents, and the nature of the interview, 
the following information: 


and 


the 


provided 


is currently employed as 
DATTu locate d at 101 Merrit t 7, Norwalk, C T 06851. 
position forf L Pr ior to that. 


at 


to uaikt: 


and 



[ was 

irtly as 

the 


ha <3 hmlH 1-ha 


i 


b6 

b7C 


b6 

b7C 


DATTO is a company that provides products and services to small 
businesses related to cloud storage and disaster recovery. DATTO had 
an established relationship with PLATTE RIVER NETWORKS ( PRN) and 
provided them server back-up and recovery services for some time. 
DATTO' s relationship with PRN was already established in 2013 when PRN 
acquired a new contract to manage an email server with a client known 
to DATTO as CESC. At the time, DATTO did not know who PRN' s client 
CESC was. 

When PRN reached out to DATTO in. May 2013 to provide back-up 
services for the CESC client server, PRN requested a slightly 
different service from DATTO than they normally request. Typically, 

PRN would request that DATTO back-up remotely to DATTO' s secure cloud. 
For the CESC client server, PRN requested that the server be backed-up 


Investigation on 1 1/19/2015 

_o02_1^2 


at 


Stamford CT 


File # 


By SA 


Hate dictated N/A 



SA 
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locally and privately. At the time of' this request, it was not only a 
new request for PRN, but a non-standard process for DATTO. In order to 
affect the private, local . storage needs for PRN' s CESC client, PRN 
ordered a SIRIS 2000 device from DATTO, but forgot, or did not know, 
to also order the private node that the data would be routed to and 
stored on. Because of this, the default on the DATTO configured SIRIS 
2000 sent the CESC server back-up data remotely to DATTO' s secure 
cloud and not to a local private node. This default configuration on 
the SIRIS 2000 has since been changed. 


stated that PRN must have known data was being logged in 
DATTO’ 5 Secure cloud and not on a local private node. As evidence. 


stated the partner portal, that PRN had log-in credentials to, 
nact a reature displayi ng backed-up data and options to delete cloud or 


delete local 


delete cloud. Additionally, [ 


state d PRN wou ld have seen their back-ups under 


was shown a document provided by 
DATTO indicating email records were manually deleted from the naTTn 


secure cloud back-ups of the PRN CESC server in March 2015. 
stated that it couldn't have been a DATTO employee that deleted those 
email records, because there would have been a work ticket indicating 
as much. C oncerning the IP addresses as sociated with the March 2C15 


deletions , 
handling th l 


thought 
connection and 


was the DATTO relay server 
was a local host connection. 


stated PRN had log-in credentials on the partner portal that 
weren r t’ tied to one employee, so he did not know who from PRN logged 
iven time. 



sent to the DATTO cloud through Secure File Transfer 
(TP) from the local DATTO device purchased by the client. 

TO devices, for different., clients, are synced to one node 
data storage. Each DATTO device is segmented on 'that node 
tes to a directory paired. with the corresponding device, 
(the servers is partially encrypted and a password would be 
cess remotely. 


The DATTO server farm is housed in Pennsylvania, multiple levels 
underground, in a secure facility. In order to access the facility, 
you must be a client there and process through security, which 
includes a biometrics scan. The cages that house the servers are also 
locked. 


b6 
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DATTO virtualizes systems locally on the DATTO appliance or 
remotely in the DATTO secure cloud. As part of this process, an 
automatic test is conducted to verify the virtualization where 
screenshots of the windows login screen are sent to DATTO clients. 

Many of DATTO' s clients, to include PRN, would occasionally get 
"backup ve rification failure" notices showing their DATTO device was 
unbootable. | indicated this notice occurred very frequently and 

almost always was an issue involving the virtual environment and not 
DATTO actually failing to maintain back-ups of the associated servers. 
This issue was usually resolved with a handful of solutions to include 
changing drivers and controllers or lengthening windows for 
verification . . 


b6 

b7C 


b6 

b7C 


DATTO never altered or configured the retention settings 
regarding the period of time or frequency that the PRN server was 
backed up. The retention settings are set by the client. 

On 08/13/2015, after the CESC client was known to DATTO and 
lawyers became involved regarding the retention, preservation and 
production of records regarding the CESC client, DATTO shipped a new 
SIRIS 2000 device to PRN. The impetus to the shipment was the 
realization that the SIRIS device originally purchased by PRN was not 
encrypted. The provision of the new STRTS d et/i initiated by„' 

DATTO and brokered by their attorney, , DATTO provided the 

device to have increased security while also ensuring continuity of 
operation on the server. 

stated the DATTO secure cloud is frequently scanned and 
he hat; n o knowled ge of any intrusion or deep penetration of their 
systems. stated the best place to look for network intrusion 

is the system logs. 

j never discussed federal records retention or classified 
with any representative of PRN or CESC. 
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| Records Management:. Division, b7c 

Records Information and Dissemination Sect ion, Hinchester, Virginia 
was interviewed at FBI Headquarters, Wts stingo on, D.C. After being 
advised of the ident ities of the interviewing Agents and the nature of 
the interview, provided the following information.-. 


't r > A? : i; 


t e repnona | 

Management Division for the 


ha s been 

s past | years . 


employe d in the Re cord o 


.Approximately 6 weeks ago, j received an email from 

of the DepausLiaeiit of State (STATS) Freedom of Inf ormation Act 

(FO.IA) section. email enclosed copies of 5 email communications 

from former Secretary of State HILLARY CLINTON ' s private email account 
'which STATS believed may contain ■'■FBI equities . ” STATE requested the 
FBI conduct an appropriate c 1 a s s i f 1 e a t i o n reui ew of the emails prior 

to their scheduled FOIA public release. advised these 5 emails 

: were transmfctsd to him on a classified email system but were marked 

unclassified, recognised that at least 1 of the emails appeared 

classified and forwarded earns to the Counterterrorism Ll v.1. a.i on f CTD ; 
for classification review. These emails were reviewed bv I 
and of CTD . 


relayed these findings to STATE as per protocol. 


Appr oximate 1 y week later, STATE'S Office of Legal Counsel (OLC) 

contac ted. and questioned the FBI's 3 E CRST / / TO FORD determin ation. 

could not recall the name of the caller. According to OLC, 

does not have an official government and therefore it believed the FBI 
could not classify a document based on the FGX caveat. OLC also 
advised that they,, not the FBI , are the judge of potential harm to 
foreign governments and therefore the FBI did not have the right to 


as such, re.ma.ined class i fled at. the SECRET / /NOFDRN level. 




on 07/30/20 j 5, vw _ at 


D;ilh debited mi/A. 



Tfcis cku:^m«rtl cor tarns norther rc^vrornentfiiiians nor conclutiioru* of fho FBF it ik ihs property of tfiR t-&] h\ louised to yan? ag ency; it 
arid its contents tnro to be distributed Oblcidi yoifr agency, [ 


rHKSC 

b6 

b7C 


HRi 
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CoHtoRKtLtoi: wfi D'^02 uf_ kticr-v icw o 

believed,,. based on 
Authority (OCA) , t 
aceuratelv. 


%&£ PSAAkASS 

it the email was 


„ On fl?DO/T)15 . Rige 2 

an Or i gi na 1 Clan a i f 1 ca t i on 


clast! 


Led properly 


QhArr ^ v 


thereafter 


~J received a 


rail 


ram 


of the Internationa 1 Operations D i. v x a ion. 
( XOD ) o f the FR X . - who vv nr e s a ur e ci " h im t o cb angs the c 1 a a s i f .Led enia i 1 
to unclassi f led . indicated be had been contacted by PATRICK 

KENNEDY, Unde r c ec r e t a ry of State, who bad asked bis assistance in 
altering the email's class! float lot- in exchange for a 'braid pro quo." 

advised that, in exchange for marking the email unclassified. 


STATE would reciprocate by allowing the FBI to place more .Agents in 
countries where they axe presently forbidden. 


" a. 1 X 

IS 


_Lhi 


Following the above exchange , ] [ was summoned to an 

agency" meeting at STATE to discuss matters pertai ning to 
classJ.fi cat ion review of pending CLINTON FOX A materials . 

official from STATE, along ’with representatives from CIA, DIA 
and other government agencies were present. PATRICK KENNEDY presided 
over the meeting'. During the conversation, a participant specifically 
asked whether any of th e emails in question were classified . Ma H na 

eye contact with KENNEDY remarked, "Well, we ■' .1 1 see," 

believed this an s ref eren.ee to the FBI'* s catsgorJ.zatior, of the 
SECRET/ / NO FORT etna i .1 wh ich KENNEDY wan a t temp t lug - to i n f lu er.es . In a 
priva te meet ing with KENNEDY following the all agency meeting, KENNEDY 


a sxen 


whether the FBI | could 
unclassified?" According to 


'see their way to marking the email 
KENNEDY spent the next 15 minutes 


debating the classification of the em ail and attempting to influence 


the FBI to ehaiiae 


tne email was 


markings . Since 


continued to assert that 


appropriate ly marked SECRET/ /NOFQEN , KE NNEDY a sked wh 


else in the FBI he could speak with on the matter. 
KENNEDY to MICHAEL STEINS ACH , Assistant Director of CTB 


referred 


and 

the 


was then present during a conference call involving KENNEDY 
STEINBACK in which KENNEDY continued to pressure the FBI to change 

to unclas s i f led . STE INBACH 
conversation, KENNEDY asked 


'j .1 ass i tied ma r k i ngs 
Prior 


on 

to 


the email 
ending the 


s t a. t amen t a on 


refused to do so . 

whether the FBI or STATE would conduct the publi 
matter . STE INBACH advised KENNEDY that the FBI would not comment 
public ly on the matter , The conference call ended and , according to 


the Associated Prs 


( AP } publ i she d t he s t c rv wi th in the hour . 


Former Secretary of State CLINTON appeared ir: front of the press 
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shortly thersaf rer to d^ny having sent: 
private email server. 


On a" >!■ :■;: ! s . page 

classified emails on 


ner 


believes STATS has an agenda which involves minimising 




lass if led ns fare of the CLINTON emails in order to pro tect STA TS 


i n.tere s t e a nd t ho s e 


f 


CLINTON „ Since 


above incidents , 




received approximately 3 or 9 more emails from STATE involving FBI 
equities 1 of which he believes may be classified SECRET/ /NOFQRLL 
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Date of irsmstTiatio!) 09/03/20] i 


retirement on 


i mrouo i [Federal Bureau of Investigation (TBIT 

Intern, m ans I Operations Division (IO DT who h currently 
Wets in terviewed in per son bv FBI Spe cial Anegtsl 

at a located at 


Supervisory' Special Agent (SSAT 



M 

interview, 

_J 


land 


provided the following information; 


(U/ / F QUO) As 


interacted with PAT RICK F, KENN EDY. U.S. 


Department of State (DoS) Under Secretary' of State for Management; | [and KENNEDY’S 

relationship was professional. The two got along, but did not agree on many matters related to the FBI is 
role and authority overseas. 


(U//EOU6) In late May or earlv June, 


KENNEDY contacted him. 

BOIFS and Executive Assistant Director (’ 
iCENKEDV for months without response. 


found a note on his desk indicating 


Jwas surprised, as both his Assistant Director (/YD) JOHN 
I AD) ROBERT ANDERSON, had both been trying to contact 


(U/^eee) men 


returned KENNEDY’S call, KENNED Y asked 


assiatfc iC-e D dhariaing a classificalion of FBI informatio n contained In a n e -mail. KFNNP.DY Ed not 


bde[ 


V-fl- A J. h- 

Jwith 1 be e-mail howe ver, he told 


prov 

FBFs Records Management Division (RMD) 
document was classified* 


that 


ot 


was the one that told KENNEDY the 


(U/7 mm) KENNEDY tol 


Ithat the FBFs classification of the e-mail in question 


caused problems for KENNEDY and KENNEDY warned to classify the document as ^B9Y KENNEDY 
further stated that the classification wo uld allow him to archive the document in the basement of 
DoS never to he seen again. was not sure o.f what KENNEDY meant by a i4 B9'* 

ciassificaticm [Note: B9 may be a reference to a FOIA exemption] - 


(IJ/ /FOUQ) Not yet knowing the e-mail's content, told KENNEDY" he would look 

into the e-mail matter If KENNEDY" would provide authority concerning the ERE 3 request to increase Its 
personnel in Iraq. 


he 
hi c 


he 

hlC 


he 

hlC 


he 

hlC 


hS 

hlC 


he 

hlC 


du 09/03/201:5 




DC 



This fiotumeni estate neither recofnmcndftUons nor c<melusk>t::3 of tfie HH, ft is ihc of tho FC1 tmd l& teamed id your a&stK- y: it 

?ind its cuntauls szs noito bo rfistnbiJtot! outride your agency. 
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(U// rOUO ) Foil owin g hi s conve r sion with KJiNN ED Y | 
discuss the e-mail of concern, tokl 


classified by the FBI Counieilerrorism Division (CfD) and was related to the attac ks on the U.S. 


contacted 


to 


the e-mail. of KENNEDY'S concern was 


Jomaeied KENNEDY 


Consulate in Benghazi, Following his conversation with] 

and informed him that there was no way he could assist KENNEDY with declassifying the information 
contained in the e-mail. 


(EYrt 


loid AN PERSON and BOLES about KENNEDY'S re quest to 


declassify the e-mai l and 
did not discuss the content of the e-mail with them. 


response denying ihe ability to do so, however] 
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Date of transcription 1/19/2016 


£U//FOUO) On December 16, 2015 


Owner and Chief Technol ogy Officer 


was i nterviewed bv Federal Bu reau of Investigation (FBI) Special 


and SA 


Also present for the interview was 


Agent ( S A 


attorney^ 


the interview, 


| After being advised of the identity of the interviewing agents and the nature of 
_pro' 


Provided the following: 


(U//POUOj | foundec while living in Chicago and currently has a family 

of approximat ely! Employees com prised of full and pa rt-time em ployees, as well as subcontractors. 

a business associate o i l contacted her about a client who 


In early 2013, . 

needed a new email server Afte j exp ressed an intere st in the project and understood the clients • 


were HIL LARY AN D WILLIAM CLINTON 
few other 


:s 

n 


„ r ut her in contact with CHERYL MILLS, 

perso nnel assist ed with invoicing and technical aspects of the contract, bu; 


most of the work herself. | primary contacts were MILLS and BRYAN PAGLIANO; MILLS 

helped produce the proposal and PAGLIANO assisted in developing the requirements for the server 
architecture.! started the discussion by providing a range of options from low-cost Gmail to a 


A 

did 


more sophisticated private server. She understood the client’s impetus for the project to be 
reliability/uptime and security in the wake of a situation where the client’s private server housed in their 
residence experienced one w ^ek of dow ntime because of a storm. The client selected the private server 


from the options provided by 


was not involved in those decisions 


Backup systems were planned for Phase 2 of the project, but 


(U//FOUO) As part of the initial conversations with PAGLIANO and MILLS 
one point th e domains and number of email accounts on the server, but could not recai 




new at 


1 those details. 


Additionally 

equipment maintained by PAGLIANO. 


Ihad no knowledge of email servers owned or operated by the client prior to the 


(U/ /FOUO) After the client selected a private server! 


contacted two firms she had prior 
experience with: GRAVITAS, a large Information Techno lo p firm a nd PLATTE RIVER NETWORKS 


(PRNj 

and 


a small boutique firm . After the client selected PRN 


or two meetings; 


mm. 

Sib 


develop the details of the projeHl 


worked w ith MILLS, PAGLIANO, 
was only involved in one 


elieved he was curious about the process. PAGLIANO handled the technical 


aspects of the project and MILLS handled strategic concerns. As PRN took over day-to-day man agement. 
nvolvement gradually faded out. The client occasionally reached out for assistance anq 


would help where she could. Payment for her services was billed for the entire task, not hourly, so she 
did not charge any fee for this assistance. 
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(U/ /TQUO) 


Ibelieved a Cloud Jacket-type security device was part of the project design, so 


when it wasn’t part of the initial install, she pushed for the implementation of it after the migration from 
the PAGJLIANO server to the PRN server. During the migration she was not in the weeds, but knew 
enough to know it was done correctly from a security standpoint. | ] was not aware of any security 

intrusions or compromises while she was involved in the day-to-day operations of the transition, nor was 
she brought back in aft er the fac t on any security issues. In addition to the CloudJacket. as part of the 
security considerations, ! | discussed transitioning from BlackBerries to the iPhone with the client, as 

well as blocking international access to the server: Ultimately, the client chose to stay with BlackBerries 
and international blocking was declined because the client frequently traveled internationally. 


public 


tU/ ZTOUQ ) Since press reports ofl 


association with PRN and the CLINTON’S went 
Jand some partners contract ed Denth S ecurity to conduct Vulnerability Threat 

was not aware of any such assessment conducted 


Assessments for some of their shared clients, 
on the CLINTON’S server. 


(U/ /FOUO )| 
PRN servers: 


had no knowledge of the following topics as they relate to the PAGLIANO or 


• moving emails to a new domain 

• laptop backups 

• temporary backups 

• classified information 

• federal records 
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(U/ /TOUO) On May 23, 2016J | date of birthl | wa<; interviewed 

by Federal Bureau of Investigation (FBI) Special Agents (SA) and 

at the offices of Platte River Networks (P RN1 located at 570 0 Washington Street, Denver' Colorado ~ 

80216. Also presen t for the interview w as] and via speaker phone, 

both attorneys at the| _ After being advised of the identity of the interviewing agents and 

the nature of the interview. provided the following information: 

Service 

ood| | 

;alled he 
ZESC in 
!ESC most 


(U/ /FOUO ] | was given PRN administrator credenti 

Comnration (CESCi email server, but p mild not recall logging in t 

[were in charge of handling 

assisted with the CESC client le ss than fi ve times. He recal led he o 
updating their operating system.) [talked to ) ' Last N 

times. 


(U//FOUO)| |was not aware of a laptop containing 

HILLARY CLINTON that was shipped to PRN around February 2 
became of the foregoing laptop. 



gto 
: what 


fU//F0Hei| I was not aware of any support PRN provided the CESC client from October 

2014 to January j> 015. was not aware of any CESC request to delete, wipe or shred their email 

records. was not aware of any email content being transmitted to CESC. 


(U/ /TOUO) At this ] 
the March 2015 timeframe. 


e interview, Agents displayed PRN provided records and email from 
irovided the following information: 


(U//FOUO) was not aware of a trip made by PRN employeef 

Equinix data center in Secuacus, New Jersey. 


(U//FOUO) After Agents di splayed an email dated March 09, 2015 where CHERYL MILLS 
discussed preservation of materials, |had no knowledge of the email or any request by any entity 

to preserve CESC related data. 
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(U// FQfcf6l [ has no recoHection of a conference call on March 25, 2015 or March 31, 2015 

with CESC J stated CESC never requested their email content by deleted, wiped or shredded. 


(U/ /FOUO) r I was unaware of any PRN employee conducting manual deletions of the 


DATTO device used to back-up the CESC email server, 

(u//Fewe; 


Jwas unaware of any successful computer intrusion of the CESC server, 

will be maintained in a 


(U// FQUQ) Notes of the interview and documents displayed to 
FD340 envelope and filed with the captioned investigation. 
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Date of transcription 6/29/2016 


On June 29, 2016 


Special Agenlsl 
the call, wasL 


was interviewed te 


lAssistant to President William J. Clinton^ 

enhonica llv by Feder al Bureau of Investigation (FBI 


Representing 


and also present for 
I from The Department of Justice 


(DoJ) Counterintelligence and Export Control Section also participated i n the call. Aft er being advised of 

the identities of the interviewing agents, and the purpose of the interview, provided the 

following information: 


didf 


n i/ /rnii n 


ever use Tor. 


Iwas not f amiliar with Tor, which enables anonymous communication, nor 
described herself as a “very low tech person.” 


(u/ /rou e)| 

her @presidentclin 

occasions, a laptop. 

computer at the Clinton Foundation 
was not sure of the specific version 
sign onto her email. 


,used various communication devices and computer to remotely sign into 
on.com emai l account. These devices included an iPhone, BlackBerry, and on rare 
' fclso accessed her @presi dentclinton.com email account from her desktop 


p desktop computer operated off of Windows, but she 
Tfurther stated that she used an Apple Mac on occasion to 


(U/ /FOUO I 


. ji lid not recall experiencing any unusua 

related to her @presi dentclinton.com email account in January, 2013. 
January 5, 2013. 


spam or ph ishing email activity 
Iwas in New York on 
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On September 14, 201 5J 
social -seen rit y numberl 
Agent (SaC: . land SaI 


Platte River Networks, date of birtlf 


I from 


jw as interviewed by Federa l Bureau of Investigation (FBI) Special 

Also present for the intervi ew was 

and Department of Justice (DOJ) Attomev l I 


■ I I I * N / J I I 

After being advised of the identity of the interviewing agents and the nature of the interview. 

■ j.j tt. . r.11 • 


provided the following: 


In February or M arch 2013 J 


Lvas informed by 


at Platte River Networks (P LNL of a potential contract managing email for a high 

profile client, but did not know who the client was. was not involved in the proposal or technical 

solution for the client, nor did he have, anv first hand meetings witt^ anyone representing t he client 


and 


* 


andled those matters. 


eventually learned the client was WILLIAM CLINTON and HILLARY CLINTON (CLINTON), doing 
business through a company named CESC. At some point during the process, CESC conducted 
background chec ks on the individuals who w ould provide the technical suppo rt for the contract. Those 
individuals were I J and I did not know why CESC 


conducted the background checks, but assumed it was because they were a high profile client. 


On or about March 2015, 


first learned about concerns regarding CLINTON’S use of a 

private email server when it was reported by the media. Due to this increased attention, PRN decided to 
place Internet Proto col (IP) co untry blocks and took other additional steps to secure the CESC server, in 
the same timeframe] (participated in a conference call with CLINTON ’S counsel, Williams and 


Connolly, to determine where CLINTON’S email was stored. While] [vas on the call, 


W 


g handled most of the questions. Subsequently, PRN received a preservation 

letter from the United States Senate and a preservation request from the FBI. PRN brought their own 
counsel on board to assist with these requests. 

After receiving the FBI’s preservation request, PRN received a letter from Williams and Connolly 
instructing them to give the FBI the CESC server used prior to migrating email to PR N acfluiretl 
equipment ’ * " - — - 


_ traveled to New Jersey and turned over the server to the FBI. 
did not power up the server before providing it to the FBI. 


Stated 


The CESC email server architecture also involved a DATTO backup appliance. The DATTO was 
configured to store backup data locally, however, due to a glitch, DATTO backed up data to their cloud 
for a period of time. On or about August 24, 2015, DATTO sent PRN a letter stating they would stop 
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backing up to their cloud and preserve what was in their possession. The DATTO has a 60 day purge 
cycle, therefore, DATTO should have data from 60 days prior to August 24, 2015. 


itatedf 

email server project] 


and 


would have specific details regarding the CESC 
never heard anyone related to the CESC project discuss the existence of 


classified information on the server 
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(U//F OUO) On May 23, 201 6,1 date of birthl ( was interviewed 

by Federal Bureau of Investigation (FBI) Special Agents (SA) [ and SA 

at the offices of Platte River Networks (P RN) located at 570 0 Washington Street, Denver. Colorado 
80216. Also prese nt for the interview w as | | and via speaker phone, 

both attorneys at the After being advised of the identity of the interviewing agents and 

the nature of the interview provided the following information: 

(U//FOU0) was not aware of a laptop containing an ar chive of e mail belonging to 

HILLARY CLINTON that was shipped to PRN around February 2014. was not aware what 

became of the foregoing laptop. 

(U/ /FOUO) only recently was made aware of a CLINTON email archive file being 

tr ansmitted to the Clinton Executiv e Services Corporation (CESC) around July 2014 and September 2014 

b) vas not aware of the request by CESC, or transmittal b) | 

as it was occur rin g was not aware o f what specifically was requested by CESC or exactly how 

fulfilled the requesl never spoke with anyone at CESC. 


(U/ /FOUO )|_ 
2014 to January 201! 
records. 


| wa s not aware of any support PRN provided the CESC client from October 
I was not aware of any CESC request to delete, wipe or shred their email 


(U/ /FOUO) At this point in th e interview, Agents displayed PRN provided records and email from 
the March 2015 timeframe. provided the following information: 

(U// PQUO ) In March 2015, when various media outlets reported a private email domain and 
server was used by HILLARY CLINTON, PRN decided to create an internal “share drive” and control 
access to only the PRN employees working the CESC account. PRN never deleted information pertaining 
to the CESC client and provided the FBI all records they maintained pertaining to CESC. 

(U//FOUO) In March 2015, stated PRN employee (travelled to the 

Equinix data center to check the security of the servers and to ensure they were “locked tight.” After the 
media reports, PRN was even more concerned about the security of the server. 
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(U/ /FOUO) After Agents di splayed an email dated March 09, 2015 where CHERYL MILLS 

discussed preserv ation of ma terials. could not recall any other request by any entity to preserve 

CESC related data received guidance from PRN a ttorneys and understood CESC client 

information and records should not be destroyeq Ibelieved the preservation request applied more 

to CESC records and not necessarily email content. I believed the preservation request to be a 

request from the government. 


(U//F OUO) | [lad no specific recollection of a conference call on March 25, 2015 or March 

3 1 , 201 5 with CES C stated CESC never requested their email content by deleted, wiped or 

shredded.) |had a memory of a request by CESC to confirm their server back-ups were still 

working, but could not recall the specific request. was aware CESC wanted their email retention 

policy changed to 60 days. 

(U//FOUO) was unaware of any successful computer intrusion of the CESC server. 


(U//F OU Q~) Notes of the interview and documents displayed to 
FD340 envelope and filed with the captioned investigation. 


will be maintained in a 
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On August 17, 2 015, KATHERINE M. TURNER, Partner at the law 
offices, of Williams & Connolly LLP, 725 12 th Street, N.W. Washington, 
D.C. met at her place of employment with Agents of the FBI to discuss 
voluntarily turning over six (6) laptop computers in her possession 
know n to contain To p Secret classified information. Also in atte ndance 
were 


I 


of the FBI's Office of General Counsel, 


Department of Jus tice, f 
Connelly LLP, and|_ 


Trial Atto rney for the Count erespionage Section at the 


an attorney with Williams & 
counsel for CHERYL MILLS, from the 


law offices of Paul, Weiss, Rif kind, Wharton & Garrison LLP. 


b6 

b7C 


Prior arrangements had been made to meet at this time and place 
to discuss an agreement through which Williams & Connelly would 
voluntarily turn over to the FBI six (6) laptops computers used by the 
firm to view email communications from the private server of former 
Secretary of State HILLARY CLINTON. TURNER acknowledged that these 
laptops contain Top Secret email communications and attorney /client 
privileged communications. TURNER sought to turn over the laptops as 
soon as possible but wished to ensure that privileged communications 
on the laptops would remain confidential. TURNER declined to provide 
consent to search the laptops and wished to arrange for secure storage 
of them in a manner agreeable to both the FBI and the attorneys . The 
FBI agreed to provide TURNER with a draft letter outlining the 
proposed conditions of storage as soon as possible. 


Contrary to statements made on August 6, 2015, TURNER advised 

that only five of the six laptops are in the posse ssion of Williams & 


Connelly, the sixth being in the possession of 
counsel for CHERYL MILLS, former Chief of Staff for CLINTON, 
admitted that the computer in his possession has been connected to the 
Internet on numerous occasions subsequent to being loaded with the 
classified email communications of HILLARY CLINTON. This laptop was 
possessed by CHERYL MILLS but utilized by HEATHER SAMUELSON, an 
attorney on her staff, to conduct a review of approximately 60,000 
emails origi nally con tained on CLINTON'S private email server. 


According to 


SAMUELSON deleted CLINTON'S personal emails 
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from the original 60,00 0 resultin g in the 30,490 emails eventually 


turned over to the FBI . 


claimed the other emails had been 


deleted from the laptop but was unable to specify whether they had 
been forensically wiped to an unrecoverable state. 


Both 


and TURNER admitted that the emails contained on 
these laptops had been viewed by attorneys who did not have a security 
clearance at the time they reviewed the material. TURNER said the 
emails did not contain classification markers and thus they were not 
aware that they were classified at the time. 
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(U/ /TOU 0) On December 10, 2015 


date of birtH 


of the 


Office of the Legal Adviser, Financial Disclosure Di vision. U.S. Departme nt of State was intervi ewed by 
Federal Bur eau of Investig ation (FBI) Special Agents l and | Also 

nresent we rd J Trial Attorney, Public Integrity Section, U.S. Department of Justice and[ 


Attorney Adviser, U.S. Department of Stat e. After bei ng advised of the identities of the 


interviewing agents, and the purpose of the interview, 


Jprovided the following information: 


(U//FOU©) In 2009 


worked as an Ethics Analyst for the U.S. Department of State. 


She was responsible for reviewing the Financial Disclosure Forms (SF-278) of new and current 
employees to assess if their investments, or outside i ncome sourc es, created a conflict of interest with 
their position at the U.S. Department of State. When had questions about the filer’s SF-278 


she would c ontact them directly, either telephonically or via email, to clarify the filer’s responses. 

vould then amend the SF-278 to reflect any corrections or clarifying information provided by 


the filer. She would then send a copy of the updated SF-278 to the filer for their personal records. Once 
the .SF-278 was finalized an assessment was made on whether the filer’s investments, or other financia l 
interests, p osed a potential confl ict of interest. The assessment was then signed off on bj 
supervisor, | Upon completing the review a physical file containing the SF-278 and 


supporting documents were maintained for a finite period of time before it was destroyed. 


(U//F©U0) 


was shown copies of the following documents: 


New Entra nt SF-278 su bmitted by BRYAN PAGLIANO on April 15, 2009 

Email frorr to PAGLIANO dated August 25, 2009, with the subject “Ethics 


Clearance... (Reply Requested)” 

New Entrant SF-278 submitted by BRYAN PAGLIANO on April 15, 2009, with 
handwritten updates 

Incumbent SF-278 submitted by PAGLIANO on April 4, 2010 


(U/ /FOUO ) After reviewing the documents] 


confirmed that she had sent the above 


referenced email to PAGLIANO to clarify some of his responses on his original SF-278.| 
provided that the email contained her original message to PAGLIANO and did not appear to have been 
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altered in any way. 


also confirmed that it was her handwriting on the updated New Entrant 


SF-278 form and that the handwrit ten notes reflected additional information provided by PAGLIANO in 


response to her email. 


could not recall any additional info rmation about her exchange with 


believed that 


PAGLIANO, aside from what she had written on the updated SF-278. | 

PAGLIANO had provided the updated information to her via email but she no longer had t hose emails 
because she purged her emails when she changed positions at the U.S. Department of State, 
further noted that the physical file could not be found and had likely been destroyed. 


(U/ /FOUO) 


she did not conduct the review of that document 
stated that they were not her handwriting. 


fe vie wed the Incu mbent SF-27 8 form filed by PAGLIANO and noted that 

pointed out the checkmarks on the form and 


bid not know who reviewed the form but stated that 


should be able to identify the reviewer based on internal computer records. 


(U//FOU©) With respect to the Incumbent SF-278 form filed for 2009j 


stated that all 


income and compensation from 2009 should have been captured in Schedule A. This includes any 
income in th e calendar year, even if it was received prior to his start date with the U.S. Government. 

noted that the only exception to this would be if the income was from another government 


entity. However, income from a political action committee or another campaign related organization 
would not qualify as other government employment. 


(U// FOU e) 


noted that in 2009 the filer would h ave been pro vided with several pages of 


instructions on how to correctly and accurately complete the form, 
copy of the instructions to the interviewing agents. 


provided an electronic 
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(U// FQU Q ) A copy of the above referenced documents and the original interview notes are 
attached in a 1 A envelope. 
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Date of transcription 


09/02/2015 


On September 2 , 2015 , 

Homeland Security Investigations (HSI 
Security (DHS) , Norfolk Virginia, was interviewed 


a Special Agent with 
Department of Homeland 
at the Federal 


Bureau of Investigation (FBI) . After being advised of the id entity of 
the interviewing Agent and the nature of the interview, 
provided the following information: 


| | was previously an agent with t he U.S. D epartment of 

State, Burea u of Diplomatic Sec urity ( PS) . I I left DS in 

approximately spouse, | was also a 


prior DS agent who., from 20 07-20 09, served as an Assistant Shift 
Leader on former Secretary of State COND OLEEZZA RICE'S and HILLARY 

CLINTON'S protective details. served briefly on former 

Secretary CLINTON' s protective detail i n 2009. From her own 
experienc e . and information obtained through and other agents, 

described a "stark difference" between RICE and CLINTON with 

regard to obedience to security and diplomatic protocols. RICE 
observed strict adherence to State Department security and diplomatic 
protocols while CLINTON frequently and "blatantly" disregarded them. 
For example, it is standard security and diplomatic protocol for the 
Secretary of State to ride in the armored limousine with the local 
U.S. ambassador when traveling in countries abroad. It is seen as 
diplomatic protocol for the Secretary of State to arrive at foreign 
diplomatic functions with the local ambassador; however, CLINTON 
refused to do so, instead choosing to be accompanied in the limousine 
by her Chief of Staff, HUMA ABEDIN. This frequently resulted in 
complaints by ambassad ors who w ere insulted and embarrassed by this 


breach of protocol. | | explained that CLINTON'S protocol 

breaches were well known throughout Diplomatic Security and were 
"abundant . " 


CLIN 


explained that ABEDIN possessed "much more power" over 
TON' s staff and schedule than other former chiefs of staff. 

believed that ABEDIN herself was often responsible for 
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overriding security and diplomatic protocols on behalf of CLINTON. 
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On a trip to Jakarta, Indonesia, in early 2009, CLINTON requested 
to visit an area of Jakarta that presented security and safety 
challenges . This visit was reportedly for a photo opportunity 
regarding CLINTON'S "clean cooking stoves" initiative. The DS advance 
team recommended against traveling to this area because the route 
could not be secured and was lined with dangerous circumstances and 

individuals. As . such, the DS advance team recommended in writing that 

this excursion be stricken from the schedule but were told by DS 
management that it was going to happen because "she wanted it." DS 
agents felt this excursion into potentially hostile areas placed 
CLINTON, her staff, the media, and her security detail in unnecessary 
danger in order to conduct a photo opportunity for "her election 
campaign." DS agents had the perception that CLINTON was using her 

position as Secretary of State to campaign for President of the United 

States. DS agents felt CLINTON traveled with hand-picked media who 
would present her in favorable light in order to garner political 
support. It was also believed that CLINTON disregarded security and 
diplomatic protocols, occasionally without- regard for the safety of 
her staff and protection detail, in order to gain favorable press. 


b6 

b7C 


CLINTON traveled in an armored vehicle whose passenger windows do 
not open. This is a design feature for the protection of the 
occupants. However, the driver's window does open slightly. On one 
occasion while traveling to Palestine. CLINTON ordered the limousine 


driver, believed to be 


to open the window while in 


occupied territory", referring to a dangerous area of the West Bank. 


initially declined to respond to CLINTON'S request; however, 
repeated demands by CLINTON forced him to open his window despite the 
danger to himself and the occupants. 


explained that security and diplomatic breaches were 
often communicated from the foreign post back to the Department of 
State via cables from the Regional Security Officer l RS O) . These 


cables often described incidents like those described above, 
recommended interviewing current and former RSOs from foreign posts 
visited by CLINTON during her tenure for more detail into these and 
similar events . 
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Early in CLINTON'S tenure as Secretary of State, she and her 
staff were observed removing lamps and furniture from the State 
Department which were transported to her residence in Washington, D.C. 
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| does not know whether these items were ever returned to the 

government upon CLINTON'S departure from the State Department. 


Despite having her own DS security detail, CLINTON continued to 
utilize a Secret Service security detail while at her residence in 
Chappaqua, New York. DS security would meet Secret Service security at 
the airport in New York and turn over protection to them. This 
practice was unknown to DS prior to CLINTON' s tenure and often 

presented logistical problems to both services. explained 

that CLINTON'S treatment of DS agents on her protective detail was so 
contemptuous that many of them sought reassignment or employment 
elsewhere. Prior to CLINTON'S tenure, being an agent on the Secretary 
of State's protective detail was seen as an honor and privilege 
reserved for senior agents . However, by the end of CLINTON'S tenure, 
it was staffed largely with new agents bec ause it wa s difficult to 
find senior agents willing to work for her. claimed to have 

had at least one conversation with Secret Service agents who 
experienced the same poor treatment. 


Inside CLINTON'S office at the Department of State there is a 
security checkpoint known as "Post 1." Post 1 is staffed by a 
uniformed DS officer and a DS agent and provides security to CLINTON'S 
inner office. CLINTON'S office is a Sensitive Compartmented 
information Facility (SCIF) and Post 1 is located within that SCIF. By 
DS security policy, no cell phones are allowed inside the SCIF and DS 
agents, officers, and staff are required to leave their cell phones 
outside the door in secure lockers. CLINTON refused to abide to this 
security requirement and brought her cell phone, believed to be a 
Blackberry, inside the SCIF where a DS agent assigned to Post 1 was 
required to guard it. DS agents were indignant that they were required 
to follow security policy but CLINTON made herself exempt from the 
same regulations. 
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fedefUl bureau of investigation 


Date of transcription 2/1 1/2016 


(U// FOUO) On February 10, 201 bf 


Federal Bureau of Investigation (FBI) Special Agents! 


offices of Latham & Watkins LLP, 885 3 rd Ave, New York City, NY. Also present werel 


DOJ 


and 


was inte rviewed by 
at the 1ft w 
and 


and the purpose of the interview, 


of Latham & Watkins. A fter being advised of the identities of the interviewing agents 


provided the following information: 


fU//FOUOJ is currently a] 


and s| at 

He was formerly th 



|at the Department of Defense (DoD) from] 

Prior to the DoDj Fas at the 

National Security Council' (N SCI froml until 


ifrom 

to the Fall ofl II 

from until early 

and then 


(U//F0H0) 


provided that there were typically three to five Deputy Committee (DC) 


meetings a week, up to four Principal Committee (PC) meetings a week, and NSC meetings with the 
President as needed. Additionally, there was a weekly l unch betwee n Secretary GATES. National 


provided that 


Security Advisory DONILON and Secretary CLINTON 
the DoS representative for DC meetings and Secretary CLINTON was the DoS representative for PC and 
NSC meetings. 


(U// FOUO ) While at the NSC 


| was responsible for working with the meeting 

participants, to in clude the D epartment of State (DoS), to coordinate and plan for each upcoming meeting. 
More specifically, T would review memorandums, prepare meeting packages and control the flow 

of inform ation betw een the agencies. These interactions occurred through both formal and informal 
channels] |provided that with respect to DoS matters he primarily worked with JAKE 


SULLIVAN and JOE MACMANUS. 
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(U//FOUO) Prior to each DC and PC meeting the NSC would notify the participants of the 
upcoming meeting and ask that th ey submit t heir meeting packages in advance so that they could be 

distributed as read ahead material. stated that he routinely worked with SULLIVAN to ensure 

that DoS a gendas, talking points, and formal documents were received in advance of each meeting. 

noted that he would sometime provide relevant documents, such as ODNLassessments, to DoS 
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for their use as they prepared their meeting packagesj stated that the classification level of the 

packages was dependent on the content and could be unclassified, classified or a mix. Documents and 
meeting packages were typically transmitted between agencies via the appropriate email system, secure 
fax (i .e. , W ashfax) or couri er servi ce. 

(U//FOUO) Following each meeting an NSC staffer would take notes and then prepare a 
Summary of Conclusions (SOC) that summarized the issue discussed, supporting and dissenting opinions, 
the final outcome arid any necessary action items. The SOC would then be approved by the NSC 
executive staff before being distributed to the meeting participants. 

(U//FOUO) was not aware of how or where the NSC archived the SOC and related 

documents for a specific DC of PC meeting. ■ 

(U//FOUO) was shown several emails that were sent in preparation fo r an Octobe r 2009 

PC meeting regarding the U.S. strategy in Pakistan. However, after reviewing the emails ! stated 

that while he remembered the topic in general he could not.recall the specific PC meeting in question. He 
noted that at that time there were numerous meeting on the subject Similarly] ;ould not recall 

the details of any of the documents referenced in the emails. While) [could not comment on the 

specifics of the emails he did note that the emails were representative of the communications that .were 
exchanged between NSC and DoS as they were preparing for a PC meeting. 


(U// F0UO 1 
meeting. However! 


the limited content of the email. 


was shown an email that was sent in preparation for a June 2011 PC 
could not recall any specifics regarding the PC meeting in question given 


(U//FQUO) A copy of the original interview notes and the referenced emails are attached in a 1 A 
envelope. 
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(U// FOUO ) On 1 0/23/20 1 3. Speci al Agent (SA) 


Invalidation f FBU. PORI SSAN 


and SAJ 


Federal Bu reau of 


was interviewed in person by SA 


in FBI Headquarte rs. After being advised of the identity of the 


b6 

b7C 


interviewing Agents and the nature of the interview] 


provided the following information: 


Service (DSS1 

in 

where he was assigned to the DSS Los Angeles Field Office. In 


jvas selected for an assignment with the Secretary of State’s security detail. 



served on the Secretary’s detail until 
new agent training. 


bS 

b7c 


when he joined the FBI as an SA and attended FBI 


(U// TOUO ) When! 


began hi*j stint on the Secretary’s detail, CONDOLEEZZA 
detail assignment carried over to HILLARY 


RICE, was the Secretary of State 
CLINTON, when she was appointed Secretary of State in 2009. 

(U// EOUO) DSS covered the majority of CLINTON’S protection while she was in the 
Washington, DC, area. However, when her husband was in town. United States Secret Service (USSS) 
would cover the bulk of the protection detail responsibilities when she was with her husband or in the 
residence. 


bS 

blC 


(U//F OU O) USSS would provide security for CLINTON’S 3067 Whitehave n Street NW. 
Washington, DC, address during the day and DSS would cover the overnight detail. 


was 


never inside the CLINTON’S Whitehaven residence, as DSS usuall y posted in a veh icle outside. 


CLINTON had a secure telephone in her Whitehaven residence an 
secure room. 


i 


assumed it was in a 


bS 

bic 


(U//FOUO) CLINTON usually traveled to her home in Chappaqua, NY, via a US Airways shuttle 
from Reagan National Airport (DCA) to Westchester County Airport in White Plains, NY, USSS would 
handle CLINTO N’S security in N Y, and DSS would have a small presence to maint ain CLINTON’S 
communications. was never inside CLINTON’S Chappaqua residence, 

was kn own as the CLINTON’S Chappaqua “house guy/scheduler.” The security detail would often 
contact to determine the Secretary’s departure time. 
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(U// FOU & ) The Secretary’s security detail chain of command was as follows: 


1 Special Agent in Charge (SAC) 

4 Assistant Special Agents in Charge (ASAC) 

3 Shift Leads (SSA) 

Approximately 45 SA’s assigned directly to detail shifts 


jimm 



was the SAC during CLINTON’S tenure as Secretary 


were two ASA C’s during the sam e time period 


agents assigned with[ 
all still employed with DSS (possibly in the Washington Field Office). 


1 

■_l 

to 

> / \ , anu ucun 

CLINTON’S d 

1 | 

:etail. 


■anal 

1 and 1 

Ewere snm 


are 


(U//FOU©) CLINTONS office was located on the 7 lh floor of DoS Headquarters, The entire 
Secretary’s suite was a Sensitive Compartmented Information Facility (SCIF). The DSS security 
detachment maintained a Post directly outside the Secretary's office. The DSS space was known as Post 
One (1). DSS personnel were not authorized to bring their mobile phones into Post 1, as it was located 
within the SCIF. CLINTON did keep a mobile phone inside a desk drawer inside Post 1 , but when she 
would remove the phone from the desk, she would take it to a non-SCIF space to make calls or use the 
phone. 
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(U//P©fcfe) HUMA ABEDIN and CHERYL MILLS were among CLINTON’S staff members 


who had offices located within the 7 


th 


flop r Secretary’s SCIF. In addition to ABEDIN and MILLS, 
and JAKE SULLIVAN, were part of CLINTON’S main 
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Traveling crew.” MILLS did not accompany CLINTON on many overseas trips. 


(U// TOUO ) 


could not recall the specifics surroundin g the electronic d evices used by 


CLINTON'S executive staff, but he assumed they were BlackBerry devices 


did not interact 


with CLINTON nor MILL S via email, but sometimes he would receive a forwarded email with their 


accounts listed in the chain. 

CIintonfoundation.org accounts 
originating from a Gmail account, however, he was not entirely sure. 


reme mbered receiving email chains that contained 
also thought he recalled seeing emails from| 


bs 

bic 


(U//F QU O) In addition to the Secretary’s DSS security detail, CLINTON also traveled with a 
team of Security Engineers who were specifically assigned to her staff. These Security Engineers would 
travel overseas with CLINTON for the specific purpose of setting up and maintaining her 
Communications while on travel. The Security Engineer Team generally set up a secure communication 
post inside the Embassy, or a hotel room adjacent to where the Secretary would stay. T he communication 
post would be manned 24 hours a day. 
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(S//WF) The team of Security En 
Secretary’s communications via dmlom 

bl i 

igineers would send the necessarv eauioment to set up the 

atic pouches 


i r 

\s it relates to the 

Secretary s use ot Diplomatic touches,] 

j was unaware ot the process and procedures related 


to the preparation and transport for overseas travel. 
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(U//F OUO) When traveling overseas in advance of, or with, the Secretary, the Regional Security 
Officer (RSO) would usually provide CLINTON'S security detail a letter, prior to, or on arrival. The letter 
provided guida nce on what to expect from a security standpoint while in a particular country. 

I was not sure if a similar letter from the RSO was provided to the Secretary and/or her 
executive staff 


(U// FOUQ) The Secretary's security detail would “hotwash” after an overseas trip, to compare the 
advance team’s preparation to what actually took pla ce during the Secretary’s travel. The RSO was not a 
part of these after action discussions. believed an RSO would send a cable to the RSO 


assigned to the Executive Office at DoS Headquarters if there were any security issues concerning 
CLINTON and/or her staff 


hS 

hie 


(U// FQUQ ) Agent notes are maintained in a 1 A envelope. 
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United St ates Depart ment of State f STATE) . 515 22 nc S treet NW, 'Wa shington, 


D.C. 20037 
date of birt tl 


office teleph one (202)1 


mobile telephone (202 


emai 


was interviewed on his mobile telephone by FBI Special Agent! 


I C— b 




.aie.cov. 


After being adv i sed of the identity of the interviewing Agent and the nature of the interview. 


provided the following information: 
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The Information Programs and Services (IPS), Bureau of Administration oversaw the program for 
Congressional inquiries and Freedom of Information Act (TO I A) requests. The House Select Committee 
on Benghazi requested emails to or from former Secretary of State Hillary CLINTON related to Benghazi. 
It was determined there were 296 emails related to the Benghazi request. After IPS officials performed 
their review of the 296 emails, they referred emails for classification determination to four outside 
agencies, specifically the: 1) FBI; 2) CIA; 3) Department of Defense (DoD); and 4) National Security 
Council (NSC). 


IPS officials have regular points of contact (POCs) at all agencies and STATE bureaus that the 
IPS would send classification determination referrals to in response to Congressional or FOIA requests. 


-FBI: 

-CIA: 


1 " 

-no contact information nrovided. 

-no contact information provided; 



IPS team,| 

- DoDl 
provided. 


boss was 


■the CIA’s FOIA branch similar to STATEN 


email wad 


hnuciawov. 


Offi ce of the Secretary of Defense (OSD)— no contact information 


retired n ow, hut was the PO C earlier in 


was processed. NSC's current POC w ai 






believed 


Ltplephone 20: 


ght inform, 

Legislative Affairs, if contacted by the FBI. 


[tele 

Jmi 



he Benghazi request 
email 

l 

and 


Before IPS conducted their review of tire Benghazi request] 


Attorney ^ Offi ce of the Leg al Adviser performed their own, independent review of the 296 Benghazi- 


related emails, 
a classification determination. 


rev iew team used different POCs at other agencies to review the 296 emails for 


did not know why: 1)1 


team did a review, as that -was 
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IPS' purview; 2) why 

team used c 

afferent POCs than the regular POCs IPS used: 3i what 

review' criteria and/or parameters 


team used during their review'; and 4) why team 

reviewed and produced tire 296 emails to the House Committee prior to IPS conducting their formal 


review. 


Jteam used reviewers from the foll owing agenc ies: 1) Department of Justice (DOT); 2) 

team's PC Cs were as follows: 


CIA; 3) DoD: and 4i White Hop se Counsel ('W HO. 
- DO! 


---islephoae 202 


- CIA: When asked direetlv who the C.f A reviewer was. 


and her team stated they did 


□ordinate thr ough the CIA hut, to date, h ad not given a name lor wh o their CIA reviewer was. 


-DopJ 


telephone 70: 


vtto tn 
_j email 



Stmail.miL 


1 L 


- WHC; 


1— telephone 2(L 

email 

kfwho, CO D. V 


Jdid not know why 


the WHC instead of the NSC, 
the wrong POCs. 1 


instead of the NSC. 



Stated that 


team used & POC at the DOX instead of the F BI and a POO at 
Mfini to provide his thoughts on why he thought they used 
earn made a “rookie mistake” when they used the WHC 
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summed up tire issue with the different POCs as 
referred the 296 emails to the NSC., FBI, CJA and DoD wbereasj 
to the W’ 


fnstrating a nd again pointed out that IPS 
team referred the 296 emails 


K2 DOJI C iA. and DoD, and none of the referents were known to be the same between IPS ' 


ream and 


team. 
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federal bureau of investigation 
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D.C. 20037, o fries teleph one (202)1 
date of bi rth. 


enrat 


laMatc.gov, 


mobile telephone (202'| 

was interviewed in person by FBI Special Agents 

1 at SB! Headquarters, 935 Pennsylvania Avenue Northwest, Washington, D,C. 20533. A lter 

being adviser! of the identities of the Interviewing Agents and the nature of the interview] [provided 


the following information; 


tor Margaret “Peggy ft GRAFBLD, Deputy Assistant Secretary, who was responsible for 
overseeing 400-500 employees who work on matters related to die Freedom of In formation Act (FOIA), 
the Privacy Act, and information management for STATE, A/GIS was tire office dial provided guidance, 
usually through memorandums, that oversaw records compliance for all STATE employees. A/GIS also 
oversaw the coordination, production and maintenance of STATE’S Foreign Affairs Manual fPAMT 
though A/GIS was not responsible for the FAME content 


Joyce BARR, Assistant Secretary, Bureau of Administration, was 
GRAFELD's boss and immediately subordinate to Under Secretary for Management Patrick KENNEDY. 


In or around August 20 1 4, 


\m Legislative Affairs to work review and production matters related to mmiiries from the House 


Select Committee on BenshateL 


STATED Leymotivs Affairs. It was around that time that 


learn about records production an d the FOIA process. Around the same time. 


telephone cull from 


A ttorney. Office of th e Legal Ad viser, wh o asked: 


anv CLI NTON -r elated e mails in t he 


request. 


pnswers- 


,pst tile that 


started to 


■cocky d 


f there were 


that there were CLINT ON -.related emails in thd 


pad from a prev ious FOIA 
,p$i .tile. 


The Information Programs and Sendees (IPS)* Bureau of Ad mini suation oversaw the FOIA. 
program, hi or around November or December 201 4. In response to a FOI A request, IPS officials were 
notified they would pick-up 14 banker boxes of emails at former Secretary of State Hillary- CLI NTON" s 
office related to C LINTON N use of personal email to conduct official STATE business. Later] 


be 

b7C 


started working at STATE irj 


[and since! 


was the 



b6 

b7C 


b6 

b7C 


b6 

b7C 
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J iu eoaients lit e not is be Jistnbtj'fcd outside, your agency. 
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to oick -uo only Y > boxes at Williams Sc Connolly, LLP. On or around December 4 , 2014, 


jp,ieked~up 1 2 boxes at Williams & Connolly. 


[Global Pu blishing Solutions, who used classified copiers and made two-sided 

, a copy for officials in SIXTH Executive 


copies of ail recei ved materials for 

Secretariat (S/ES). and a couple of copies for IPS officials to use for their FOIA review. The original 
emails were shrink-wrapped and placed in a sensitive comparimented information facility in Newington. 
Virginia. 


fo March 20 IS 


first beard of issues with the CLINTON -related FOIA. process. 


Legislative Affairs and Office of the Lean! Adviser. 


stated 


fold 


jhe 

_|w< 


would know 


why and how those 2516 specific emails were picked and why and how they conducted their own review, 
separate from any review the IPS uni t conduct ed. Previously, IPS ha<l always been in charge of 


Congressional document production; 
Legal Adviser would normally only wei 
conduct the review and production. 


plated attorneys from Legislative Affairs and Office of the 


the material with STATE bureaus and other aaeae-s.es. After their own review was finished 


produced the requested material for the House. Committee, prior and independent to the IPS 


unit’s formal review. 


stated those involved at IPS felt the T h floor, or leading STATE officials, bad their own 


b6 

b7C 


and IPS be 

officials were unsure what happened to the other two boxes. The Items in the boxes were stacked with no b7c 
folders or known method ofomuirixation. 


b6 

b7C 


[the FOIA program. The normal FOIA process would be where IPS 
received a FOIA request then IPS fonvarded that request on STAT E forma via email to the person who 
the FOIA request pertained to. The pertinent party would then fii out the form and provide the IPS office 
the requested items, which the IPS office then reviewed prior to a release of the information back to the 
initial requestor. In the CLINT ON -related FOIA case, IPS received rut unprecedented amount of emails 
in hard copy form, as there were 52,455 work-related pages to review. In a letter hand-delivered to 
KENNEDY by Cheryl MILLS, or MILLS' attorney, it w r as stated, “in an abundance of caution, they 
overproduced.” 

Separate from the CLlNTON-rciated FOI A request, there was a Congressional request for 
CLIN'f ON -related emails related to the Benghazi incident from the House Select Committee on 
Benghazi. A review was conducted of 296 amahs, probably bv pe rsons who wo rked in tfc g Bureau of 


b6 

b7C 


b6 

b7C 


In on t he legality and scope of requests, but IPS would actually 
land] [stated they coordinated the prop er review o f 

and 


Ideas on how to formally review the 296 emails. KENNEDY’S initial idea for how to review the 296 
email was as follows; 1 ) the IPS officials conduct a. review; 2) IPS officials referred items to other STATE 
bureaus and inter-agency partners for their revie w; 3) IPS officials recei ved the referral determinations 
and submitted to the House Committee. The review process that was finally decided upon was as 
follows; 1) the IPS officials conduct a review; 2} IPS officials referred items to other STATE bureaus and 
inter-agency partners for their review; 3} IPS officials received the referral determinations and submitted 
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m the Office of the Legal Adviser; 4} after the Office of the Legal Advisers review, then it would be 
submitted to the House Committee-. 


b6 

b7C 


In mid-March 2015 , IPS officials conducted their formal review of the 296 emails on their 
classified network, aka “€LASSNEX? : using their Freedoms System, aka M'25' IPS felt immense 
pressure to complete the review quickly and to not label anything as classified. In IPS’ initial review, 
they did not use a B{!) exemption on any of the emails. The B{3) exemption was used to exclude the 
public release of classified information or matters related to national security. IPS officials were told 
there was nothing classified In the 296 emails, so they shouldn’t use the B(l) exemption. 


thought there were four or 


However, from the formal review of the 296 emails, m total, 

five STATE bureaus, such us African Affairs Bureau and the Near Eastern Affairs (NILA) Bureau, and 
five non '-STATE agencies, specifically the FBI, CIA, Department of Defense. National Security Council 
and White House Counsel that were sent referrals (items/emails) to conduct their own forma! 
classification review. The NBA responded that in the material th ey received there were four or five B( 1 ) 

redactions that needed to be made. After lie heard tins, was frustrated and asked IP S officials if 

they were Agoing to challenge the desk officer from Maghreb 1 ' by using the .13(1) exemp tion. 
isked, "Who %t NEA upgraded if? Well need to explain cl&ssffifMion to t hese nep okv 


multiple titusa 


experience with document prod 


already c oordinated with other agencies and 


actions 1 


stated 


a as previous 


Stated “NEA will change their B(I)s to B(5)s because 


they (NEA) didn’t understand how to classify items.” A 15(5) exemption was not used for classified d ata. 
but rathe r for privileged communications, such as executive- or attorney -related privileges. or 

also stated, “it’s not classified until we upgrade it.” 


The review officials that 


anal 


used for the review of the 29 6 emails w ere no- the 


same normal review officials that the IPS team use on a regular basis. Fo r example^ 

hut instead 
and 


did not use the IPS’ normal point of con met for the FB1,| 
the Department ofJusrice to count as the FBI reviewer. The nametl 


anti 


used someone from 
| stated they used 


and! 


used. 


reviews with at tire CIA. 


upon being asked directly, would not give a name of who they coordinated 


Throughout the process. 


pared if an email /item should have a B(l) exemption, then. 


PS would me a 13.(3 ) exemption. D espite that, at the end of the referral process, IPS was told to run 


; very thing bv Legislative Affairs and 


IPS officials fel t intim idated whe n t hey used o r suggested 


the use of the Bill exemntip n on any of the 296 emails. In addition to| 
and; 


bind 


KENNEDY 


were named as some of the STATE officials who pressured IPS employees to 


not label anything as classified. 


b6 

b7C 


for White Hous e C ounsel arid the Department of Defease were also not the regular reviewers the IPS team 


b6 

b7C 


b6 

b7C 


In late April 2015, IPS officials completed the formal review of the Benghazi- related 
Congressional inquiry. All materials were ready for release at that time. The CIA provided redactions, 
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but none were deemed a R(l) exemption. Most of the items with CIA redactions wore emails from 
Sidney B LU MEHTH AL . One item was d eemed clas sified a ccording to tir e FBI and KENNEDY held e 
closed door meeti ng attended by the FBF'j [and IPS’ 

KENNEDY as ked[ 


amon g others. In that meeting, 


to change the EBEs B(l) upgrade classification, but 


did not change 

the FBI's stance. On May 22, it was decided by die IPS team they would keep the upgrade of the one 
FBI-related email and the IPS officials sent David KENDALL, Attorney, Williams <& Connolly. LLC, a 
letter informing him of the results. 


b6 

b7C 


b6 

b7C 


There was a powerful group of very-' .high-ranking STATE officials that some referred to as “The 
7 m Floor Group” or “The Shadow Government.” This group met every 1 Wednesday afternoon to discuss 
the FOlA process. Congressional records, and everything CLINTON -related to P 0 1 Afoongressional 
inquiries. The known .regular attendees included Jonathan FINER. Chief of Staff for Secretary of State 
John KERRY, Jennifer STOUT, Deputy Chief of Staff, Heather BIGGINBOTTOM, Deputy Secretary of 


Affairs 

Office of file Lean! Adviser overseeing STATE’ s| 


A. Jl ■ 

Office of the Legal Ai 

iviser. 

i 

1 

md 




Norms IK , with larger FOlA. requests, such as with the CLINTON -related FOlA request, IPS 

would schedule a rolling release -that meant every few weeks or rnontp . the properly reviewed and 

approved material would be made public. However, | | and The T' Floor Group argued 

fee release should be done all at once in January 2016, for coordination purposes. While IPS officials did 
not have control of the release process of the 296 emails related to the House Select Committee on 
Benghazi's request, .they did have control for the release process lor the approximately 30,000 emails, or 
52,455 pages related to the CLINTON FOlA request, and it was decided to be a rolling release. 

On July 15. 2015, IPS on-boarded Intelligence Community Inspector General (ICIG) reviewers to 
help with tile overwhelming review process. The ICIG reviewers were trained up mid had been integrated 
into fee FOlA review process to help ensure IPS can meet fj 
redacted emails bv the Jarman' 15, 2016 deadline. To date, 
referrals already sent out for classification determination. 


, re mand ated release of all non-exertipt/non- 
was aware of approximately 305 


jstated S/ES me the Custodian of Records for all Secretaries of State and Deputy 

As such, S/ES received all taskers from the IPS team related to FOlA requests that 


Secretaries of State. 

involve Secretaries of State or Deputy Secretaries of State. S/ES should also have answers regarding 
STATEN procedures that dealt with iAormaLon technology :i including hardware and software fur STATE 
em ployees' emails and telephones. Joseph M ACM ANUS, Executive Secretary' and Ambassa dor. S/ES, 


and 


S/ES. or 


someone in the S/ES Information Resourc e Manag ement (S/ES/SRM) unit should know specific details 

jstated STATE servers were located at fee Enterprise 
would be knowledgeable about 


about CLINTON’S at-home server set-up. 

Server Operations. Center (ESOC) and ManagernentTRM (M/ 
STATE servers. 
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High-ranking STATE officials, described as some Assistant Secretaries and all Under Secretaries 
and higher, used a separate network .tor emails and record-keeping called the Principal. Officer Electronic 
Management System (POEMS). The vast majority of STATE employees were not on POEMS. 

| stated .he heard third-hand the National Security Agency (NSA) set-up a computer for b6 

CLINTON and the FBI should talk to S/ES about the specifics. Additionally, FBI should ask S/ES about b7c 

Jake SULLIVAN'S email being hacked, as maybe that had something to do with CLINTON'S emails or 
why the NSA set-up her computer. 
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FEDERAL BUREAU OF INVESTIGATION 


Date 0J3\;2iU5 


Colorado. 80216, telephone (303 ) i 

Federal Bure an of Investigation Sp ecial Ag.em .j 


££ 


advised of the identity of the aaemd 


Platte R iver Ne tworks. 5700 Washington Street. Denver. 

_[ e ntail lirfcoiatten yer.com. was contac ted in person bv 

aent a p pd | A fieri [was 


identified himself ad 


Platte River Networks and 


that he had contacted the company's legal counsel about the scheduled meetinu with the FB 


iulv 29. 2015, Counsel 


advised 


on 


not to answer questions from the FBI without counsel 


present. 


SA 


provide 

a < 


(aii 

£ t 


S.-4 



told 


to interview would be necessary; howev er, SA 


^document with instructions for Plane River Networks, 
jto an empty conference room. 

provided a copy of a FBI preservati on letter c 


heeded to 


invited both SAs 


Kahle IV, Section Chief. Counterintelligence Division. 


.sited July 27, 2015, signed by Charles H. 
commented compa ny officials had 

wondered, how long it would take for them to be contacted about the named account. | lasked for 

cl arification 
to 


then read 


in about the preservation letter and the responsibilities of their company. $A 

]a portion of foe preservation letter and explained (he FBI was not asking for any information 
at this lime, hut that the letter was served in anticipation of future legal process. The letter requested that 
Plane River Networks preserve any records to date which were identified in the aforementioned 
preservation letter. Agents also explained the request for non “disclosure. 


ex pressed h is conce rn about P latte River Networks becoming a target if tins matter ever 


became public. $A{ 


provided 


with her contact information at RBI Denver. 


was also provided FBI Strategic Partnership Coordinator (SPC) brochures that have 
information about Counterintelligence security awareness. Agents also discussed the FBF$ infragard 
program. 
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FEDERAL BUREAU OF INVESTIGATION 


Dak: oUranseripUtm 0& 07, 20 15 

On August 6 , 2 015, KATHERINE M. TURNER, Partner at the law 
offices of williams & Connolly LLP, 725 12 h:i ' Street, Nil Washington, 
U T C , met at her place of employment with Agents of the FBI pursuant to 
an agreement reached by correspondence between the Department of 
Justice and Williams a Connolly, This agreement (enclosed) , reached on 
August 6 , 2 015, provided that Williams & Connolly voluntarily turn 

over to the FBI three (3) thumb drives containing 30,490 emails from 
former Secretary of State Hillary Clinton' s @ciintoneinaiI . com account 
as well as hard copy printouts of the emails and a laptop computer 
containing a duplicate electronic copy . 

At approximately 2 ; 30PM, TURNER met Agents at the loading dock of 
her firm and transferred 22 legal boxes of documents to the FBI ' s 

possession along with a laptop computer and three { 3 ) thumb drives 

described in detail below and on the enclosed FD- 94 1 , Consent to 
Search Computers , and FD- 597 , Receipt for Property „ 

Item l: Lenovo Thinkpad T420, S/N PB-YCS12 12/03 

Item 2 : Lexar Micro 16GB thumb drive , black and silver in color, 

S/N LTDTT16GB-000-1001DA (original) 

Item 3 ; Lexar Micro 8GB thumb drive , green and 'white in color, 

S/N LTDTT8GB ~ 0 0 0 ~ 1 1 7 AU 

Item 4 : Kingston SGB thumb drive, silver in color, S/N DTSE9 

Item 5 -27 : 22 legal boxes containing paper copies of the above 

described 30,490 email communications 

TURNER explained that the original thumb drive, Item 2, was 

obtained from Platte River Networks but did not describe how it was 
collected or under what circumstances, TURNER described the other two 
thumb drives as identical to the original though one of the drives 
contained two complete copies of the email set. The laptop computer 
was previously used by the firm for unrelated matters but was believed 


Investigation on OMLJOj 5.. 
Lie * 


VVashhi<don. DC 


Bv SA 


Date dialed N A 


ThD document eon wins neither recommendations not conclusions of the FBI. U is the properly of the FBI and loaned to your agency: it 
and its ooments aiv noi to be distributed outside your agency. 
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to have been cleaned of privi leged material prior to use and storage 
of the 30,490 emails. This laptop has not been connected to the 
internet, since being loaded with an electronic copy of the emails . The 
user name for the laptop is " . \ internetonly" and the password is 
” InternetOnly ! J" . 

TURNER explained that the firm maintains six (6) additional 
laptop computers , each of vmich contain identical digital copies of 
the 30,490 emails, but also contain attorney/client privileged 
communications and as such are not being turned over to the. FBI at 
this time. TURNER advised her firm is in negotiations with the 
Department of Justice over the disposition of these laptops. 

Prior to departing , TURNER signed the enclosed FD- 34 1 , Consent to 
Search Computers, and FD-597, Receipt for Property. The original ’was 
kept by the FBI and copies were made by TURNER for her records. 

Subsequent to the FBI's collection of the above. Items 1-27 were 
transported to the Washington Field Office of the FBI where they were 
entered into evidence , and given IB numbers . Copies of the intake 
sheets and FD-1004 are enclosed with this communication . Items 1-4 
were then transported by members of the FBI's Forensic Analysis Unit 
to Quant i co, Virginia for storage and evaluation. Items 5-27 are 
presently stored in evidence control at the Washington Field Office. 
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FEDERAL BUREAU OF INVESTIGATION 


Date ttf irsmcr iption 


2015 


(U//F©tf6) On December 18, 

Executive Secretariat- Information Resourc e Management Mobile Communication s fS/ES 


MC), at the U,S, Department of Slate, email address 

was Interv iewed by Federal Bureau of Investigation (FBI) Special Agents 


ffi^tate,ff ov, telephone 203 


JEM 


JiXid 


m * ^ : 1 s Jr V | r- — i | 

lifter being advised of the identities of the interviewing agents, and the purpose of the interview, 
provided the following information; 


(U//FOfct© 


ms worked at the Department of State since | ~\ s\d has held a variety of 


IT related positions that include mobile computing, network engineering and developing the State 
_Messaflina and Archive Retrieval Toolset ('SMART* system. 


(U/ /FOUO ) The MC team is responsible for establishing secure mobile voice and data 
communications for the Secretary of State (Secretary) and his team when they are traveling domestically 
and internationally. Prior to a trip by the Secretary and his team, the MC team assembles kits of 
networking equipment at their lab in Springfield, VA, The kits include networking components such as 
switches, routers, encrypters, laptops and VOIP phones and are customized based on threat stream 
information provided by the local Regional Security Officer, The equipment is then tested to ensure that 
it is working properly and that it hasn't been compromised before being sealed in a diplomatic pouch and 
sent to the ITS, diplomatic establishment at their destination. Upon arrivi ng onsite, the team collects the 

pouch and checks that the seals haven't been tampered with, >rovided that there are nine kits 

of networking equipment and that multiple kits are deployed when the Secretary is traveling to multiple 
locations on a single trip. 


(CflNF) 



bl 


tovetfigation art 

Fite# 


at Waahmffi fjflu D.C. 






002 . Date dictated N/A 





This dfletuaent comuias neither reeorrimendmions nor conclusions of the FBS, ti is the property of the FBI and i.s loaned to your agency; it 
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{U/ / H i)UOj 'Ihe communication networks established by the MC team provide the Secretary and 
his staff with secure data and voice connections, so that, they can connect back to the Department of State 
network to securely conduct official business. Although the networks established by the MC team create 
encry pted data channe ls, users are still required to use a fob to access their Department of State email 

noted that the MC team continuously monitors the network enerypters to watch for 


accounts. 


any signs of an intrusion or other compromise of the system. 


(U//F©fcf0)[ 


^provided that the Secretary and his team typically do not use the SBU 


network established by the MC team for persona! matters. He noted that they are free to use the standard 
internet service in their own room* as any other hotel guest would. 


i&ffrffl 

When classified documents, or facsimiles^ are sent tor the Secretary to review they arc usually delivered 
to the MC team by the local U, S. diplomatic establishment The MC team then reviews the classification 
markings and page count before providing the document to the recipient. Once the review is complete the 
MC team collects the document* counts the pages and then enters the event into a log. 


(U//T OUO ) If an urgent message arrives at the mobile command post for the Secretary or his team 
the MC team will alert the recipient that a message has arrived and that the recipient should return to the 
command center. Depending on the Secretary's location* t his might me an sending a message to one of his 

Line Assistants or knocking on his door if it is after hours, stated that the Secretary does not 

have a secure cell phone and that he is typically notified to return to the mobile command center even 
though there are usually secure communications in his car. 


(u//Fewef 


Istated that the MC team's policies and procedures are the same for 


domestic travel as for international travel. However, in the case of domestic travel the communication 
kits are sent via Diplomatic Security instead of via the local LLS, diplomatic establishment. 
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(U// F0U O) The MC team is typically staffed by two to four MC team members, depending on the 
site, AH of the MC team members hold a TS/SC1 clearance and receive extensive training on the 
equipment and security procedures before their first deployment. The MC team members are from various 
components within the Department of State and may be contractors. Foreign Service members, or career 
civil servants. The average team member is on the team for t wo or three ye ars befo re moving on t o 

another afigicmment within the Department of State. However,! hoted that 

has been on the MC team for approximately years. 

(U/ /FOUO) was not in a position to comment on how the MC policies and procedures 

had changed between 2009 and today but he noted that they are constantly working to apply faster and 
lighter techn ologies that will achieve their mission of providing secure and reliable communications. 

pad no concerns with the MC team’s ability to meet its objectives given the resources that it 

had. He Provided that] [ or j 

may be able to provide more insight on how the MC team operated between 2009 and 

HI 


(U//FOOO) A copy of the original interview notes are attached in a 1 A envelope. 
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(U/ / F OUQ ) On June 21 , 2016] | Date of Birth| L was interv iewed 

by FwWa( Riireaii of I nvestigation ( FBH Special Agents and] at his 

residence,! IVA . After being advised of the identities of the interviewing agents, 

and the purpose of the interview] provided the following information: 


(I T//FQH6H Worked at the I JS Department of State (DOS) for approximate!) ] [ years before 

leaving in l | telecommunications specialist under t he Exec utive Secretariat 

(S/ES) at DOS during HILLARY CLINTON’S tenure as the Secretary of State. loted that his daily 
duties remained the same during this period despite several reorganizations which moved his position to 
different departments. He was responsible for supporting the installation and operation of secure 
communication equipment at DOS. This in cluded secure video, secure voice, the Washfax, as well as 
regular telephone and facsimile equipment. was not responsible for email s upport, w hich was t he 
responsibility o f S/ES - Inf ormation Resource M anagement (S/ES-lRM) j [ reported to| 


who was the 


5/ES-IRM under JOHN 


(U//FOH6) | [ supported CLINTON’S transition to DOS and was responsible for establishing 
secure communications in her office, vehicles and residences. He initially conducted a survey at each 
residence to identify where the commercially provided telecom service entered the r esidenc e (i.e., the 
“point of presence”) and to assess what equipment needed to be installed. Thereafter. [ connected aTl 

a it and ran lines to the locations in the residences ,where the equipment would be installed. Although 
installed the equipment it was sometimes maintained by other departments within DOS. For example 

a maintained the Defense Red Switch telephones (i.e., red phones) once they had be en installed by 
The point of presence in the Whitehaven residence was in the basement an< ran lines from 
there to closet in the third floor SCIF. He then dropped additional lines to the second floor office area so 
that an additional STE and red phone c ould h e installed. Similarly, the point of presence at the Chappaqua 
residence was also in the basement and | | ran lines to a small luggage closet and then to the final 
equipment locations within the residence. 

(U// FOUO) During the tra nsition] | was also tasked to research the feasibility of obtaining a 
secure BlackBerry for CLINTON. ] | was directed to do this by a combination of the following people: 
DAN SMITH (Executive Secretary), LEWIS LUKENS (Deputy Assista nt Secretary). JOHN BENTBL 
(S/ES-IRM Director), and the Operations Center Director who was either [or 
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T it the time. DOS wanted to assess the feasibility of using secure BlackBerry phones because 
CLINTON and her staff were BlackBerry users so DOS want ed to p rovide them with resources that they 
were familiar with. However, after conducting his assessment ] | found that the secure BlackBerry 
phones would require an entirely new infrastructure, which was cost prohibitive; and the actual devices 
were too thick. 


qj// rOUo i I was shown an email with the subject “State Department Telephone Services at 
Secretary Clinton’s Residence” that he sent to LUKENS and ABEDIN on January 27, 2009. The email 
summarized. the telecom equipment that was installed at the Whitehaven residence. After reviewing the 
email, ;xplained that “CMS VoIP” line referred to the direct phone line to the White House and that 


the “IST/Red Switch” was a red phone that was installed as a backup to the CM S VoIP line. The 

“Business Lines” and “Ops Dedicated Drop” were standard phone lines. stated that not all of the 

instal led equipment belonged to DOS and noted that the CMS VoIP system belonged to the White House. 
^ aid he did this in an effort to give the Secretary the most reliable equipment but this approach 


caused some strife within DOS. 


(U// TOUO )| | from S/ES-1 RM. wa s responsible for installing and 

managing CLINTON’S computer systems at the residences ] C oordinated his installation activities 
with S/ES-IRM and typically did not conduct his work when they were on site in effort to avoid flooding 
the residence with people. 

(U//F QU 0 J Iwas show n an email with the s ubj ect “Secretary Residentia l Installation 

* 1 1 1 J 1 on March 1 7, 2009. 


ash” that he sent to BENT EL \ 
[explained that a hotwas 



and 


I 1 I 

onducted to develop a solution for any technical problems they had or 


Hotw; 

complaints that they received ] [ stated that they had significant issues with the unclassified telephone 
lines at the residence in Chappaqua. He attributed this to the number of service providers that a direct line 
traversed as it connected Washington and Chappaqua. As a result the lines consistently had bad 
connections. Additionally, the red p hone on the second floor in Chapp aqua did not function properly and 
eventually CLINTON directly. askec[ 1 ” T___, 


0 remove 


the phone[ 


Yc ^ 

stated that he r emoved the phone but 
it created some internal issues for him as the phone was maintained by IRM and not | | group. 

(U//F 0 y 0 ) | [ stated that the “Server: Basement Telephone Closet,” as listed in the attachment 
to the aforementioned “Secretary Residential Installation Hotwash” email, referred to the pointof 
presence for the telephone system in Chappaqua and was not a reference to a computer server] 
aware that there was an email server in the Chappaqua residence. However, he believed it was 
CLINTON’S family email and he did not realize that CLINTON was using the server for DOS business. 

(U// FQUo J [ could not recall when he first learned that CLINTON was using a private email 
account but stated that it was sometime during her tenure. He did not think that CLINTON’S use of a 
private em ail acco unt was odd because COLIN POWELL had a priv ate ema il account that he accessed 
from DOS ] [ iso assumed CLINTON had a DOS issued account. | [ did not communicate directly 
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with CLINTON on email and instead worked through HUM A ABED IN when necessary ! lid not 
recall anybody ever expressing concern over CLINTON’S server or email, but noted that he did not attend 
the S/ES-IRM meetings were such topics would likely have be discussed. 
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(U// FOUO) A copy of the original interview notes and referenced documents are attached in a 1 A 
envelope. 
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counsel 


present was 
Department of Justice attorney! 


(U/ /FOUO) On May 12, 2016] 

Investigation (FBI) Special Agents , , , 

F.i spnli nwer F.xeci iti ve O ffi ce Building. 1650 Pen nsylvania Av enue NW, Washington, DC 20 502. Also 


and 


was interviewed by Federal Bureau of 
in room 374 at the 


agents, and the purpose of the interview 


attorney at] 


and 


After being advised of the identities of the interviewing 
[provided the following information: 


(I I// TOI } Q )| is currently employed as the 


Security Council 


at the National 


has held a Top Secret/Sensitive Compartmented Information (TS/SCI) 


clearance since 2003 when he was originally sponsored by the Central Intelligence Agen cy (CIA). 


is not,, nor has he ever been, an Original Classification Authority (OCA). In earlyl 


began a fellowship at t he Department of State (DOS) in the South As ia Bureau. After mov ing to the Iran 


desk for a few weeks ini 


began working as) 


Representative for Afghanistan and Pakistan (SRAP). While at the SRAP office 


for the Special 
worked for 


PAUL JONES, FRANK RUGGIERCLMARC GROSSMAN a nd RICHARD HOLBROOKE 


remained working for the SRAP unti 


when he moved to| 


at DOS. 


was unaware of how information flowed to 
was generally aware that the E xecutive Secretariat at 


he Secretary of State 


bould not say who 


(U//FOUO) While he worked at t he DOS 
Secretary of State HILLARY CLIN TON. P 

the DOS was responsible for information f ow to 

communicated or emailed with CLINTON. |did not email or communicate with CLINTON 

directly and did not know that CLINTON had a private email address hosted on a private server until he 
was made aware via various media outlets in March 2015. 


(U//FOWO-1 


was assigned official DOS ema il account s on both an unclassified network 


did not have a Joint Worldwide 
could access in his office, but was 


and the Secret Internet Protocol Router Network (SIFRNet) 

Intelligence Communications System (JWICS) email account that he 

aware that he was issued one by the Bureau of Intelligence and Research (INR) at the DQS. [ 
indicat ed he rare ly used his JWICS account because his work did not necessitate it and it was hard to 


access. 


jcnn lH not reca ll any specific DOS training pertaining to official email usage guidelines. 


policies or practices. 


stated “obvipusly classified information goes on classified systems/ 
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(u// rou e { 


stated Principal’s Committee (PC) meetings were initiated by the National 
Security Advisor via official notice to government agencies. The PC meetings would involve participating 
government agencies presenting their policy on topics prescribed by the National Security Advisor. A 
Deputy’s Committee (DC) meetin g would inv olve the same process although convened by the Deputy 

National Security Advisor. During tenure at the DO S, he reca lled weekly DC meetings related 

to Afghanistan and Pakistan issues. While in the SRAP office j j woutd contribute to packages 

assembled for DC and PC meetings. Usually, the Deputy SRA P would as sign various taskings for a 
policy paper to be used in a DC or PC. Within the SRAP officej [stated there was no science as it 

related to who was , assigned work. The assignments could be based on your area of expertise or who you 
knew within DOS. 


was unaware of any formal process when. collaborating, drafting, editing or 


publishing a written product with another bureau or office at the DOS. 


(U//F OUO ][ 

written nrnHnet 


Iwas unaware of the term “upclass” as it referred to the classification of a 
did not know how classification of a written product was ultimately decided, 
[recalled seeing written product with suggested classification markings and he would always 


adhere tn those by appropriately marking the same information earned over to his products or edits. 

stated portion markings at the DOS were uncommon before WikiLeaks released classified DOS 

cables on their website understood the classification process to “happen organically” and to be 


‘more of an art than a science.” 
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(UZ /FCUjO ) At this point in the intervie w. Agents d isplayed documents and emails concerning a 


October 5, 2009 PC meeting involving the DOS 


provided the following information: 


(uz /Fou e 


recalled the general topic of th e October 5, 2009 PC meeting, but did not 


stated there were many PC and DC 


recall the exact meeting or any of the displayed documents 
meetings regarding Pakistan and Afghanistan policy in_200§" 
any portion of the briefing paper or the attachments. could not recall who drafted any of the 

briefing paper or the attachments. When sh own metad ata indicating] [drafted the attachments 

associated with the foregoing briefing paper 


ldid not recall drafting or editing 
yt re 


1 stated th e metadata interred he interacted with the 


attachments, or possibly saved them at one point, but did not recall doing so 


(U//P OUO ) described the ] | ~eport as the result of a review of Afghanistan and 


Pakistan policy reques ted hv Ge neral STANLEY MCCHRYSTAL. The repo rt resulte d in a request for a 
troop surge in the area. 


recalled there bein g a classi fied version of thel 


report released and 


[believed it was stand ard practic e to have both 

escribed the 


then shortly after, an unclassified version released 

classified and unclassified versions of a document released around the same time 
report as relevant one dav . and the n shortly after, irrelevant. During his tenure at the 5KA 
not recall ever reading the 


^report. 


t 


could 


while at the DOS 


recalled having no concerns over classification or mishandling of documents 
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(U/ /FOUO) Notes of the interview and the documents displayed foij^ 
an FD340 envelope and filed with the captioned investigation. 


kvill be maintained in 
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(U// FOUO) On January 29, 2016 


t late of birt'f 


interviewe d by Federal Bureau of Investigation (FBI) Special Agents 


at Starbucks Cafe, 370 7 


(h 


Ave, New York, NY 10001. ReyVe^ectingl 
Attorney at Law, telephone (202) 


present for the interview, was 
advised of the identities of the interviewing agents and the purpose of (lie Interview^ 
provided the following information: 



qj/ZEewof 


joined the Department of State fDoSl itT 


JAKE SULLIVAN 


[Thereafter she be came t h^ 

left the DoS inj |to work for the 


as a Special Assis tant for 
under 


(U/ ffOUO l 


provided that as a Special Assistant at DoS she was a political 
appointee. Upon starting at DoS she was sw orn in and then received the standard on-boarding and 


security trainings. However, 


could hot recall any specific training about the Freedom of 


Information Act (FOIA) or the Federal Records Act. 


(U/ /FOUO) 

'other devices that she used. 

DoS and did not email directly with her until after she had left DoS 


Lever tr aveled with CLINTON and had no knowledge of her iPad or 
did not have direct conta ct with CLINTO N while she was at ‘ 


> 


new that CLINTON 


was usin g a personal ema il account but did not know that it was a potential issue until she read about it in 
the press 


was unaware of an official policy at DoS regarding the use of personal email 

.1 1 Y ■% /'P 1 1 ,1 4 -1 T t " 


accounts and recalled that other people on CLINTON’S staff would use their personal emails periodically 


(U/ /TOUO) 
handling of classified information 
Plfl.qqNrt svsfpm but did not know 


held a TS/SCI c learance while at DoS and received training on the 
routinely handled classified information on the 


how such information was transferred from SULLIVAN or 


ko CLINTON- 


(U// FOUO) ZFS is a Limited Liability Corporation (LLO thfl t was established for the Office of 
Hillary Rodham Clinton, by 


(U//FOUO) When 

brieinallv ioined the! 

lifrwas 

based in Washington, D.C. at 


^ j i 

The office then moved to New Y one city n 
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everybody had to work from home until 


he 

hie 

he 

hie 


1U// FOUO ) 



was originally an 


at the 



^nd was primarily responsibl e for arranging phone calls, drafting mem os and summarizing news 

Iprovided the names and 


articles. She was later promoted to thd 


positions of the following individuals who| 
that time period: 


during 


b6 

b7C 


HUM A ABEDIN - Chief of Staff 
MONICA HANLEY — Personal Assistant 



tu//eeuef 


provided that P latte River Networks f PR N't provided IT support to the 


frequently spoke with 


from PRN, 


about routine matters such as purchasing laptops and maintaining the IT systems. 


fUZ/p eiJOt l" 


[had no recollection of ever receiving a laptop from PRN or 


spoke with HANLEY regarding this matter approximately one month ago 
and then review ed her email records to see if she had any further information about the laptop. 

found one email between her and HANLEY in whic h they discussed sending the laptop to 
PRN. However, the discussio n transitioned fro m email to phone anc | had no further 

recollection on what occurred,! noted that this occurred during the period when everybody 


was working from home due to the aforementioned lease issue. T herefore, i f the laptop was shipped to her 

she would have had it sent to her apartment. She further noted that was r esponsible for op ening 

the mail for the office but that he would not have opened anything directed to her | 

speculated that perhaps it was shipped to the Clinton Foundation in New York City but she did not know 
what they would have done with it. 


(U// POUO) 


had no recollection of CLINTON'S erq ails being turned over to DoS. 


Nor was she involved in the culling of CLINTON'S emails 
archives of CLINTON'S emails aside from the laptop in question 


snj 


had no knowledge of any 
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(U//FQUO) Following the interview, 

bgreed to provide the above referenced email 

b6 

chain with PRN to the FBI. On February 3. 201 6 
email to SA 

counsel electronically provided the 

b7C 


(U/ /FOUO ) A copy of the original 
attached in a 1 A envelope. 


interview notes and the email provided byl 


are 
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to the Inspector General, United States Department of State, Office 


j — 1 

of Inspector General f STATF. 1G1 2121 Virginia Avenue, NW, Suite 8100, SA-3, Washington, DC 

^ I I L— , 1 * . . . _ . i rm c* „ 


900^7 telenhone T2Q2 h 
Agents 


land 


emai 


ii 


Agents and the nature of the interview 


Sstate.gov was interviewed in person by FBI Special 
After being advised of the identity of the interviewing 
provided the following information: 


b6 

b7C 


In early March 2015, the New York Times published an article about Secretary Clinton’s personal 
email account while at the Department of State. The article alleged Secretary Clinton used a personal 
email account to conduct official government business in violation of federal laws. Sometime thereafter, 
John KERRY, Secretary of State, sent STATE IG a letter requesting a review of email and records 
management at the Department of State. On or about March 1 2, 201 5, STATE IG and Office of the 
Inspector General of the Intelligence Community (ICIG) received letters from Congress requesting a 
review of State Department employees’ use of personal email for official purposes and coordination with 
relevant agencies to determine whether classified information was transmitted or received by State 
Department employees over personal systems. 


STATE IG initiated a review of the use of personal communications hardware and software by 
five Secretaries of State and their immediate staffs. The review went as far back as former Secretary 
Madeleine ALBRIGHT. In Fall 2014, the Department of State wrote to the last four Secretaries of State 
asking whether they had any official email in their personal records. The Department of State issued 
preservation requests, asking each former Secretary to preserve all electronic data they had while at the 
Department of State. Secretary Colin POWELL responded that he used an America on Line (AOL) 
account. Secretary ALBRIGHT reported that she did not have personal accounts with official records. 
Secretary Condoleezza RICE reported having a Gmail account, which she did not use for official 
purposes. 


In response to the preservation request, Secretary Clinton’s attorney, David KENDALL wrote a 
letter to STATE IG stating Williams & Connolly, LLP was in possession of three thumb drives with 
Secretary Clinton’s email from her private network. KENDALL and Katherine TURNER were the only 
people at the firm with access to the thumb drives. The letter further stated Platte River Networks was in 
possession of the server and had been made aware of the preservation request. 
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In December 2014, Williams & Connolly, LLP produced twelve boxes, approximately fifty five 
thousand pages of about thirty thousand emails to the Department of State from Secretary Clinton’s 
private server. There is a court order in place, which requires all thirty thousand emails to be released by 
January 30, 2016. The emails have to be released on a monthly basis. The emails are released based on 
select percentages. Thus far, two waves of Secretary Clinton’s emails have been released on the FOIA 
website. Department of State had about fifty to sixty people working on Secretary Clinton’s emails fix the 
FOIA review process. 


Upon receipt of the emails, they were scanned, entered to the OCR process and then uploaded to 
Department’s of State ClassNet system, which was classified up to SECRET. The emails were then 
divided into sub-groups. Then each email went through the FOIA process to determine the appropriate 
FOIA exemptions, if any. Ultimately, the emails were publicly released. Initially, senior State Department 
officials were being used to review the emails. The officials would review the email, identify which State 
Department equity worked on the information, and would then send the email to that department. The 
receiving department would then identify certain exemptions and/or send to other agencies, if other 
agency equities were involved. The emails would come back to Department of State for further review 
and were ultimately reviewed on the FOIA website. The B (1) exemption was used to protect sensitive 
Department of State equities. B (5) exemptions were used to redact internal deliberations. B (6) 
exemptions were used to redact Personally Identifiable Information (PII). 


STATE IG brought in I CIG to assist with the i dentification of classified information and to take a look 


at the FOIA re view process 
review process I 

S 1 


prom ICIG reviewed Department of STATE’S FOIA 


Ibrought broader experience to Department of State’s assembly line review 
process. | |quickly determined Department of State needed to make some changes to their review 

process. On or about June 19, 2015 STATE IG and ICIG jointly made four recommendations to the State 


Department related to the FOIA review process. The recommendations were as follows: 


1 . Recommend State Department FOIA office request staff support from IC FOIA offices to assist iii 
the identification of intelligence community equities; 

2. Recommend IC FOIA officers review the emails to ensure that ClassNet use is appropriate before 
transmitting to the State Bureaus for review; 

3. Recommend State Department FOIA seek classification expertise from the interagency to act as a 
final arbiter if there is a question regarding potentially classified materials; and 

4. Recommend State Department FOIA Office incorporate the Department of Justice into the FOIA 
process to ensure the legal sufficiency review of the FOIA exemptions and redactions. 

Patrick KENNEDY, Under Secretary for Management, U.S. Department of State was a key figure in 
all of this. KENNEDY accepted FOIA recommendations number one and three on behalf of the 
Department of State. During a July 2015 meeting with STATE IG and KENNEDY, KENNEDY said 
something to the effect “We sent our folks from Diplomatic Security (DS) to conduct a security 
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assessment of Williams & Connolly”. DS concluded Williams & Connolly had procedures in place to 
secure the three thumb drives. KENNEDY mentioned Williams & Connolly handled the General Petreaus 
investigation, so they had the appropriate clearances and were safe. STATE IG left that meeting with the 
impression that Department of State had an electronic copy of Secretary Clinton’s emails. Later, STATE 
IG was told that Department of State did not have an electronic copy. STATE IG still would like to obtain 
an electronic copy of the thumb drives. 


be 

b7C 


STATE IG’s review focused on the following areas: 


1) Preservation of Records 

a. Are records being preserved far archival purposes? 

b. Are appropriate systems in place for freedom of Information Act (FOIA) purposes? 

c. Are records being kept hi line With the Federal Records Act? 

2) On-Boarding Process 

a. How are methods of communications established for new Secretaries? 

b. Each Secretary may like various devices, how does Department of State make those devices 
secure for usage at Department of State? 

c. How had Department of State addressed security issues? 

d. How did State Department set up secure phone line at Secretary Clinton’s house? 

e. What precautions were in place for personal devices? 

3) Records Creation Designation 

a. How does State Department make sure draft documents get captured in Department of State’s 
records retrieval process? 

4) How has Department of State handled FOIA and the Congressional Process? 

| | opined Department of State’s record keeping process was not good. Prior to the last couple 
of years, record keeping was done on a print and file basis. Literally, if someone wanted something to be 
kept as an official file, that person would have to print the document and request another person file it 
away. STATE IG was in the process of taking a deep dive into the on-boarding process of Secretary 
Clinton’s server. 


Secretary Clinton preferred to u se Black berries. In fact, she had at least two email accounts that 
went directly to her blackberry account. |~ | was not sure whether Secretary Clinton had an 
Information Technology (IT) infrastructure from her time in the U.S. Senate or her presidential campaign. 
Bryan PAGLIANO worked in IT support for Secretary Clinton’s campaign. Shortly after Secretary 
Clinton started her tenure at Department of State, PAGLIANO was hired as a Schedule C, directly 
reporting to Secretary Clinton. PAGLIANO set up Secretary Clinton’s personal server and provided her 
direct IT support. PAGLIANO left the Department of State sometime in 2013 and came back in early 
2015 as a contractor. STATE IG contacted PAGLIANO a s part of STATE IG’s ongoing review. STATE 
IG was informed PAGLIANO was represented by attorneys from Akin Gump Straus Hauer & Feld, LLP. 
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PAGLIANO refused to talk without being granted immunity from prosecution. 

Secretary Clinton had at least two AT&T blackberry accounts. The first account was the HR1 5 
email account. In September 2013, there was an article about Sydney BLUMENTHAL having his email 
account hacked. Apparently Secretary Clinton’s HR 15 account was cited in that article. As a result, 
Secretary Clinton changed her email to HRD14. 


Jbelieved that Secretary Clinton’s server at some point was held at her Chappaqua 


residence. Departme nt of State would send an advance team to set up Secretary Clinton’s communications 


wherever she needed. 


nt of Sta 

l ] 


did not know who paid for the server. Huma ABEDIN and Cheryl MILLS 


were the conduits for contacting Secretary Clinton. Only a few people at the Department of State were 
able to contact Secretary Clinton directly. 


As part of STATE IG’s ongoing review. 



b6 

b7C 

b5 per DOS 


Department of State employees 


who were all 


was willing to provide the FBI with assistance as necessary. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 6/3/2016 


ni/ /POTi J») On June .1, Department of State (DoS]| 


was interview ed by Federal B urea u of Investigation" (FBIV Special" Agents 
_ in his office located atL 


Viiginia. After being advis ed of the identities of the interviewing agents, and the purpose of the 


? 


interview. 


provided the following information: 


tq 


JIM 




was the 


from 


POWF.1 .1.. and H1I.LARY R. CLINTON at D oS. 


most recently reported to 


(U//F6H©]| ; 

(IT) Operations for QoS. T his included, but was not li mited to, soft war explications, hardware, 

telecommunications, email. ~ ’ " " 


DoS Information Resource Management (IRM). 


(U//F©tJ©)l 


provided IT briefings t o CLINTON’S transi tion team upon their 


arrival, however, the DoS executive office did not fall undeij jresponsibility. JOHN 

RF.NTF.L . who oversaw Executive Secre tariat Information Resource Management (S/ES- IRM), would 
have been in regards to managing IT programs for executive management. 


(U// TOUO) Around the time of CLIN TON’S onboard tr ansition, PATRICK KENNEDY, Under 

' ' I I , * TT. MI m r 1 \ T T-ii 1 /-'I I T 4 X T i- _ 

4 


interview BRYAN P AGLIANO, who 
interviewed 


tael 


Secretary of State for Management, suggested^ 

served on CLINTON ’s 20 1 2 Presidential Campaign. , , 

PACT IANO. wh o had a MBA from the Universit y of Maryland. Alte r interviewing PAGLIANO, 
pgreed he would be a good fit for team. PAGLIANO was 

subsequently hired on to DoS in a Schedule C position, and was tasked with assisting mainly with cost 
recovery planning and researching DoS technical enhancement opportunities. 

(U/ /FOU 6) was not aware PAGLIAN O had a secondary role of providing 

technical assistance to CLINTON. Although [ was aware PAGLIANO came from 

CLINTON’S campaign, he noted PAGLIANO did not have any over tly apparent ties to the 7‘ floor [a 

~ m only recalled one 


reference to whe re CLINTON'S ex ecutive suite was located at DoS]. I 
incident where in | yas dealing with a matter that need 


lyas dealing with a matter that needed input from the f floor, and 

J 1 r._ IT ■ ■ 1_. l_ ^th fi flACl 1A NT/"* 


PAGLIANO mentioned he occasionally had contact with individuals on the 7 th floor. PAGLIANO 


investigation on 

j= 


File # 


By sa| 


6/3/2016 at 

big- 
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Date dictated 
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Interview o: 


{ 


On 6/3/2016. Page 


offered to reach out to his 7 th floor contacts, but dismissed the offer and proceeded 

through regular channels. As a Schedule C hire, PAGUANO would have been required to report any 
additional income he received from side work with CLINTON. 


(U/ /TOU &) 


was not aware of, nor did he have anj 


iscussions with PAGLIANO 
^tiid not have 


concerning CLINTON’S use of a private email account or email server.] 

direct correspondence with CLINTON, and learned of her use of a private erniif se-verwhen he read 
about it in the New York Times. 


(U//F0W6) It was 


understanding that DoS policy “discourages” the use of 


private email, but does not prohibit it. 


kvas not aware of the specific IT setup in either CLINTO N’S offi ce or 


(U//Feue)| 

her recid prices How ever, he believed both o f CLINTON’S residences had a DoS Secure Fax 


and/or 


was assigne d to the “ 
the 7 th floor. 


help desk ,” ancj 


may h ave had kn owledge of her off ice setup 


also assessed 


I worked fo 


i 


and 


' | but lat< 
[mav also 


but later went to work on 
have more insight 
kvas an IRM 


as to what DoS IT equipment was installed at both of CLINTON’S residences] 

technician who would know who installed DoS equipment at the Secretary’s homes. 

(U// FOU O) The State Messaging and Archival Retrieval Toolset (SMART) records management 
system was implemented by IRM as a result of recommendations from a DoS Executive Steering 
Committee. SMART replace d DoS’s tel earanh system, and was developed to automate / streamline the 


process for archiving records. 


v e 1 ]was involved in discussions about the development and 

rollout of SMART, as were representatives from SES. Representatives from the Executive Secretariat 
asked to be the last to rec eive the SMART r ollout. However, ultimately SMART was never rolled out to 

the Executive Secretariat. could not recall exactly when SMART was implemented at 

DoS, however, he assessed SMART was rolled out sometime in 2007 - 2008. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 
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Date of transcription 5/1 1/2016 


ssanT 


O n May 10, 201 ej] 
lw£ 


DOB 


was intervi ewed by Feder al Bureau of Investigation ( 
at his residence 


telephone 20! 

'BD Sp ecial Agentsl 


advised of the identities of the interviewing agents, and the purpose of the interview, 
following information: 


MD. After being 


Jprovided the 


(U/ /FOUO )[ 


served as 


ofState (DoS) fr om the beginning of KERR Y'S tenure to 


served as 


Relations Committee, 


lat the Department 


Prior to joining DoS, 


when KERRY was the Chairman of the Senate Foreign 


(U//FOUO) A lot of information would fl ow throug h] 
information concerning Congressional Oversight 


bn route to KERRY, to include 


|was tangentially i nvolved in the process of 

I to ensur e the 




production of DoS records to the Benghazi Committee, in that KERRY aske< 

Committee did not face any DoS roadblocks in response to the request. Furthermore ! | wa nted to 

make certain DoS was as comprehensive as possible in their response to the Committee’s request, 
was primarily concerned with KERRY being questioned by the Committee over the totality of the 
production, and thus wanted to cover every production avenue possible to avoid KERRY being blindsided 
if called to testify to the Committee, The production of documents related io Benghazi began in the 
spring (April/May) of 2013 and continued as a “rolling production,’ 5 


(U//F©«©)^ 


was not aware former Secretary of State FULLARY R. CLINTON was using a 


private email account until 2013, when he recalled hearing news of her em ail accoun t potentially being 
compromised as a result of a hack into Sidney Blumenthal’s email account. advised KERRY to 


use a government email account w hen he became Secretary ofState, despite what previous Secretary 5 s 


may have chosen to do: 
maintained on a private server. 


Iwas not aware until recently that CLINTON’S private email account was 


b 6 
b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 



CLINTON used a personal email account, as he was aware other Secretary’s ofState had done the same. 


: b6 
b7C 
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Interview ofl 


On 5/10/2016. Page 


(U// FOUO ) In August or September of 20 1 4 | ] went to Capitol Hill to mee t with the staff 

members of the Benghazi Committee, in preparation for a pending hearing with KERRY, recalled 

the topic of issue in his meeting with the committee staff s urrounded inquiries regarding the preservation 

of records. Following his meeting with the committee staff,] [contacted CHERYL MILLS to advise 

of possib le leaks from the committee referencing their production concerns related t o CLINT ON’S email. 

Ireealled at least o ne phone conversation with MIL LS concerning the matter. also spoke 

with from a Public Affairs perspective] also had 

some visibility in the matter, as 


(U// F0U 6) In approximately Decem ber of 201 4.| 

CLINTON emails being dropped off at DoS. wa 

and believ ed the production to be close to 50.000 n ages. 

Last Na me Unknown (LNU) and | LNU [ 

, were bro ught onto DoS to heln nrnces 

Benghazi FOIA production. [described 


'201 4, | recalled a large number of printed 

was surprised at the vo lume of emails produced 

>ages. Two attorneys from | 

LNU [believed to be a reference to ind 

i roc ess and coordinate the redactions in regards to 
las someone who would be “encyclopedic” 


concerning the process of production regarding Bengh azi, to include the production of CLINTON’S 

email. DoS was also involved with the DoS production and 

review process as it pertained to CLINTON’S emails and Benghazi as a whole. PATRICK KENNEDY, 
DoS Under Secretary for Management, also had insight into the production process. 

(U// FOUO ) During the course of the Benghazi production, DoS recognized there was a gap in 
records related to emails pertaining to not only CLINTON, but other former Secretaries of State who did 
not use DoS email accounts. As such, Executive Secretary JOSEPH McMANUS drafted a letter in 
October 2014, requesting former Secretaries produce any personal emails responsive to the Federal 
Records Act in attempt to retroactively address the gap in DoS records. 

(U//TOUO) was not involv ed with the discussions or the process concerning how the 

email production was conducted. did not provide direction on how the emails should be 

produced, nor did he have any knowled ge of wha t methodology was used in determining what emails 
were responsive to production requests. was unaware of any concerns that the original production 

of emails provided by CLINTON was not entirely comprehensive in response to the request, nor was he 
aware of any concerns that the email production might contain classified material. 


(U// TOU Q) A copy of the original interview notes are attached in a 1 A envelope. 
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(U//F6fcfe) 


date of birtra 


-b3 per ODNI 
b6 per FBI 
b7C per FBI 


was interviewed at the 


Office of the Inspector General of the Intelligence Community. Patriot Park. 12290 Sunrise Valiev Drive 
Re ston. Virginia 201 91 . Also present during the interview were 


and 


the interview. 


1 After being advised of the identity of the interviewing Agents and the nature of 


in I j^NF-)[ 


provided the following information: 

r b3 per ODNI 

““L b6 per FBI 

Jhad worked as an Inspector in the Office of the Inspector General of the b7c per 


Intelligence Community (IC/IG) for approximately 2 years. In May 2015, IG/IC began to assist in the 
Department of State’s Inspector General’s (STATE/IG) review entitled “Use of Personal Communications 
Hardware and Software by Five Secretaries of State and Their Immediate Staffs.” This assistance was 
requested pursuant to the March 12, 2015 letter from the United States Senate. 


tU) On or about May 28, 2015 


met witq 


Ithe 


Inspector General, United States Department of State (STATE) and other STATE employees in order to 
assist in completing the review. It appeared that STA TE Freedom of Information Act (FOIA) employees 
were at least already 6 weeks into the review process. | [ immediately recognized problems that 

impeded STATE’S review process. Some of the problems were 1) STATE’S computer software was at 
least 2 generations behind; 2) the optical character recognition (OCR) was faulty; and 3) STATE b3 per ODNI 
employees used initials to describe organizations, as opposed to using intelligence designations. 

bund STATE FOIA employees very helpful. On various occasions many of the FOIA officials 


b6 per FBI 
b7C per FBI 


stayed after midnight to conduct the emaiTreview. 


On or about May 22, 2015, STATE publicly released two hundred ninety-six e-mails 
belonging to former Secretary of State Hilary Clinton (CLINTON). The two hundred ninety-six e-mails 
were previously reviewed and released by STATE FOIA officials in response to previous FOIA requests. 
According to the Defense Intelligence Agency, National Security Agency, and National Geospatial 
Intelligence Agency officials, at least one of those un-redacted e-mails should have been treated as 
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b3 per ODNI 


classified. On or about June 25, 2015 the IC/IG notified the Director of National Intelligence and b6 per FBI 
members of the senate of this leak of classified information. . b7c peE 5,51 


) IC/IG believed that the release of the two hundred ninety-six e-mails did not comply with 
FOIA regulations. In fact, public figures were completely redacted from the TO, FROM and CC lines, in 
violation of FOIA regulations. It also appeared that no STATE FOIA personnel knew how the two 
hundred ninety-six e-mails had been selected to be released. STATE FOIA personnel indicated during the 
FOIA review process, some B1 (Classified National Security Inf ormation) were removed and changed to 


B5 FOIA exemptions (Privileged Communications). 


pelieved STATE FOIA redactions of b3 per odni 

classified information were inappropriately designated or changed. b6 per fbi 

b7C per FBI 

I'U) The two hundred ninety-six emails were taken from approximately fifty-five thousand 

pages of thirty thousand e-mails provided to STATE by the Law Offices of Williams & Connolly LLP, 

(William & Connolly) CLINTON’S personal counsel. According to Williams & Connolly, the firm had 
provided all of CLINTON’S work related or potentially work related e-mails from her @cIintonemail.com 
account. Williams & Connolly also maintained a copy of the .PST file containing the electronic copy of 
the above referenced e-mails, on a thumb drive, stored in a secure safe at Williams & Connolly’s 
Washington, DC office. David Kendall (KENDALL) and Katherine Turner, Esq. (TURNER) were the 
only two people that had access to the thumb drive. The firm further advised they believed the server 
equipment used to host CLINTON’S @clintonemaiI.com account was no longer valid or active. Platte 
River Networks in Colorado maintained custody of the equipment and had received pres ervat ion notices. 


W ]&&&) IC/IG had considered serving legal process to Williams & Connolly in order to retrieve 
the thumb drive. Diplomatic Security had attempted to retrieve the thumb drive from William & 
Connolly, but were informed that since the firm had received preservation le tters for the .PST files, the 
firm could not release the thumb drive to Diplomatic Security. According to [_ 


Security was led to believe Williams & Connolly in fact had 3 copies of the thumb drive. 


Diplomatic b3 per ODNI 
b6 per FBI 
b7C per FBI 


i U J I n December 20 14 > Williams & Connolly informed STATE they had fourteen boxes 

containing the approximately thirty thousand e-mails. However, when STATE officials arrived to pick up 
the boxes, STATE only received twelve boxes. IC/IG had no information as to whether Williams & 

Connolly were authorized to store classified information or if KENDALL and TURNER held security 
clearances. 

b3 per ODNI 
b6 per FBI 


M 0*^F) 
were susp icio us ot the spec 
and 


surmised 


and other STATE F OIA officials 


appointments to STATE Legislative Affairs of attorneys 


involvement off 


pn3f 


b7C per FB3 


and other STATE FOIA personne l b 


in the FOIA review process was abnormal. 


made recommendations and re quested additional chan ges that were not routine. 


both previously had worked at 


an 

and 



which appeared to create a conflict of interest. 
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b6 per FBI 
b7C per FBI 


involved in the Lois Lemer, Internal Revenue Service situation. 


and was possibly 


(U//FOUO) On or about June 15, 2015 IC/IG sent a letter to STATE/IG documenting potential issues 
identified in the Preliminary Review of the State Department FOIA Process. The recommendations were: 


b3 per ODNI 
b6 per FBI 
b7C per FBI 


1 . 


Recommend State Department FOIA office request staff support front IC FOIA offices to assist in 
the identification of intelligence community equities; 

Recommend IC FOIA officers review the email to ensure that ClassNet use is appropriate before 
transmitting to the State Bureaus for review; 

Recommend State Department FOIA seek classification expertise from the interagency to act as a 
final arbiter if there is a question regarding potentially classified materials; 

Recommend State Department FOIA Office incorporate the Department of Justice into the FOIA 
process to ensure the legal sufficiency review of the FOIA exemptions and redactions; t >3 per odni 

-- bS per FBI 

“ On or about Jun e 26-27 . 20 15, a review of the thirty thousand e-mails revealed five fc>7c P er FBI 


additional classified e-mails, 


, | used key word searches in order to review the e-mail. It appeared 

that one in every five e-mail addresses were not a .GOV e-mail address. In the thirty thousand e-mails 
there were about seventeen unsigned classification upgrade memorandums. These memorandums were 
packages of information which were being held for the Assistant Secretary of State for Administration’s 
signature. 


On or about July 1, 2015, IC/IG officials met with Patrick Kennedy, Under Secretary of State 
for Management and other STATE representatives. IC/IG informed STATE that 1(710 wrml H assist 


STATE/IG conduct the review, whether or not STATE welcomed IC/IG’s input. 




lleged 


b3 

b6 


per ODNI 


STATE made several misrepresentations during this meeting. One such statement made by STATE’S b 7 c 


per FBI 


legal counsel was “there were no classified information contained in the thirty thousand e-mails' 
was willing to assist the FBI further as needed. 


per FBI 


b3 per ODNI 
b6 per FBI 
b7C per FBI 
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United 


StatesJOenartnient of State, Office of Inspector Gene ral 1ST ATE I G). 2 121 Virgin ia Avenue, NW, Suite 


8100-1 


Washington, D.C. 20037, telephone (202)[ 


emai 


£ 


land! 


bstate.gov. date of b irth 


was interviewed in person by FBI Special Agents | 

her office. After being a dvised of the identities of the interviewing Agents and the nature of the 
interview, provided the following information: 


in 



began workine for STATE IG in 

asl 


In 

she became 


Evaluations 


and Special Projects unit, which consisted of appro ximately 10 people fr om both STATE IG and the 


Jworked on Congressional requests 


Intelligence Community Inspector General (ICIG). 

and other special inquiries that are handled by STATE IG, which included a special project related to the 
Freedom of Information Act (FOIA) process as a whole. 


STATE IG were in the process of conducting a review at STATE, focused on 
three main areas. Those areas were how 1) STATE records are preserved; 2) how STATE employees 
handled the FOIA process; and 3) the on-boarding process for new STATE employees, specific to 
methods of co mmunication, with an emphasis on the Secretaries of State. As part of that review, 
sent a questionnaire in late March 2015 to the former Secretaries of State Madeleine 


ALBRIGHT, Colin POWELL, Condoleezza RICE, and Hillary CLINTON along with current Secretary 
of State John KERRY. The questionnaire specifically asked them about their use of personal email for 
work purposes. 

On April 1 5, 201 5 STATE IG sent out requests to a broad number of STATE-related persons, 
including former staff members and others who may have sent or received work-related emails to or from 
the personal email accounts of the former Secretaries of State. The request asked for personal email s and 

any policy or trai nin g given related to the use of personal email for business purposes. had 

not yet received any email files from any of the staff members of the former Secretaries of State and was 
told that there would be no response to the request by the attorney of Bryan PAGLIANO, former 
information technology advisor for CLINTON. 

CLINTON sent out an all-staff cable that personal email should not be used day-to-day for 
business purposes and that personal email is not secure, so do not use them for business purposes. To the 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 
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, On 08/19/2015 . Page 


recollection, CLINTON sent that cable out in 2009. After CLINTON’S time as 
Secretary of State, there was also STATE guidance that if STATE employees had to use their personal 
email for business purposes they should send a carbon copy (Cc) to their “.gov” work email as well. 


b6 

b7C 


b6 

b7C 


In August 2014, STATE Under Secretary for Management Patrick KENNEDY sent out a 
memorandum for STATE employees not to use personal email for business purposes, but it did not 
address whether personal servers may be used for business purposes. There was STATE guidance that all 
information/emails related to work should be on an “approved automated system,” but there was no b6 

known STATE guid ance regarding t he use of personal servers to conduct business. That will be an b7c 


official “finding” by 
STATE IG. 


colleague^ 


]stated[] 


interviewed PAGLIANO’s former boss while at STATE, and 


PAGLIANO’s former boss was unaware PAGLIANO set-up CLINTON’S personal work server for her. 
There were no on-boarding policies in place to prevent what happened related to CLINTON using a 
personal server. STATE IG was unsure what, if any, site survey or systems security and maintenance 
checks were conducted prior to the installation of CLINTON’S server by PAGLIANO. STATE IG was 
also unsure if anyone else other than STATE employees knew of, ever saw, or had access to the server. 


b6 

b7C 


All of STATE’S top officials’ email records related to their “.gov” emails were being preserved, or 
“journaled,” no matter what. Most STATE employees, those not considered top officials, could create 
email records themselves using the SMART system. The onus was on the regular STATE employees to 
self-determine what a record is and if they didn’t use the SMART system and they’ve double-deleted the 
email, it was more than likely not going to be preserved. 


had met 


Regarding STATE IG’s review and interaction with KENNED Y,| 

KENNEDY several times, and stated KENNEDY was never overly uncooperative and never did anything 
unusual with regards to his cooperation . However. KE NNEDY’S tone and tenor were definitely not 


positive when dealing with STATE IG. 


Iso attended meetings with KENNEDY in the past 


that discussed general goals going forward for STATE with regards to STATE IG’s review. 


b6 

b7C 


| review led her to interview STATE officials who worked the FOIA process from 

within the Bureau of Administration, Office of Information Programs and Services, which fell under 
KENNEDY’S purview. Some FOIA officials have seen events and behaviors they did not like or that 
made them uncomfortable, to include KENNEDY’S attitude toward them and how they handled the FOIA 
process related to CLINTON. Additionally, there was a request from the FOIA officials to STATE 
employees that asked for any emails sent to or from personal email accounts related to the CLINTON 
FOIA request. Some STATE employees responded they had no emails that fit the request; despite the 
negative response, for some STATE employees, FOIA officials knew there were at least some emails that 
should have been included in their response because the FOIA officials had already reviewed those emails 


HRC-338 



FD-302a (Rev. 10-6-95) 


Continuation of FD-302 of. 


Interview ofl 


On 08/ 19/2015, Page 


from within the batch of 30,000 CLINTON-related emails. Despite knowing some STATE employees 
had not responded correctly, the FOIA officials had no recourse to compel a positive response. 

For the FOIA request related to the 30,000 CLINTON-related emails and the Congressional 
inquiry that req uested Benghaz i-related emails, those review process were handled outside the normal 
chain of pennle.l Idid not know whv these requests were ha ndled outside the normal chain of 

people, but 


b6 

b7C 


b6 

b7C 


b5 per DOS 


recommended the FBI talk to 


for more information on events discussed 
above and for names of other people the FBI would be interested in talking with regarding the same. 


b6 

b7C 
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(U/tfOtf©) On May 25, 2016,[ 


Special Agent, United States Secret Servi ce 


fUSSS). was in terviewed bv Fede ral Bureau of Investigation (FBI) Special Agents (SA) 


and SA 


Association (FLEOA) Attorney and USSS Sa[ 


Also presen t for the interview was a Federal Law Enforcement 


interviewing agents and the nature of the interview. 


[After being advised of the identity of the 
jprovided the following information: 


fU//FQ He)l 


tol 


^Jwas assig ned to the prote ctive detail of WILLIAM CLINTON from 
Because of l t nformation technology (IT) s kills, he was as ked 


to do network assessmep ts and troubleshoot IT issues at the Clinton Foundation. Froml 


to 

assisted the Clinton Foundation in a case related to theft of information on the 


Clinton Foundation information systems. 


(U/ /FQUO) [ 


was contacted by JUSTIN COOPER in Janua ry 2011 to as sist with the 


security of an email server at the Clinton residence in Chappaqua, Ne w York! 
physically or remotely access the server in the residence at Chappaqut 
hardware components of the server or software installed on the server. 


information from COOPER, 
located in Chappaqua. 


,did not 

Jwas not aware of the 
conducted open source 


b6 

b7C 


b6 

b7C 


b6 

b7C 


research relating to the security of email s ervers and co ntacted BRYAN PAGLIANO to recommend 
adding outbound IP filteri ng to the server . 


received PAGLIANO’ s name and contact 
was aware of no other information pertaining to the email server 


(U/ /FOUO ) Notes of the interview will be maintained in a FD340 envelope and filed with the 
captioned investigation. 


Investigation on 05/25/2016 at _ 
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Boston. Massachusetts 


File # 


t Date dictated „ 
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On September 17, 20 15 J 


JUCpO! LI 11 till U1 

Special A eenj 


4uj 


Also 


present was 


United States 

B1 


Department of State tDoSV 2025 E . Street NW, Washington, D.C. 20520, was interviewed by E 

land Information Technology Specialist / Foreq sic Examinerl 


DoS, office telephone 


After being advised of the identity of the interviewers and the nature of the interview 


provided the following information: 


The DoS email system uses a hub and spoke configuration. There are approximately 1 20,000 
mailboxes on the system, of which approximately 95,000 are for unique users. The other 25,000 
mailboxes are general mailboxes and aren’t assigned to a specific user. Approximately 35,000 mailboxes 
reside on the local hub and are administered by Information Resource Management (IRM). The 
remainder of the mailboxes reside on spokes within the system and are not controlled by IRM. Spoke 
mailboxes, such as those at overseas posts, are administered by the local Information Security Officer and 
backup procedures vary by site. 


be 

b7C 


Upon receiving the preservation request from the FBI, IRM preserved and thereafter exported the 
mailboxes for all of the individuals listed on the request whose mailboxes are on the IRM system. 

estimated that approximately 400 of the 900 accounts listed on the preservation request are 
active users on the IRM system, with the other accounts residing on spokes, POEMS, or are associated 
with users who are no longer at DoS. Each exported mailbox includes all of the active mail folders as 
well as any items in the Recoverable Items storage area of Microsoft Exchange, which retains items for 90 
days after they are deleted by the user. The export does not include any files, or mailboxes, that may have 
been archived by the user to their local desktop. 

The IRM operating system is backed up and retained for approximately 30 days. However, the 
email database is not part of the backup. For email recovery, IRM uses Database Availability Groups 
(DAG) whereby five dynamic copies of each mailbox are maintained, at two sites, to allow the system to 
be quickly restored if the primary database fails. 


opined that the exported mailboxes were unlikely to contain many emails from prior to 
2012. Prior to that time mailboxes were limited to 500MB of data and users were regularly required to 
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Continuation of FD-302 of 


Interview of 


On 09/17/2015 . Page 


delete old emails, or to create Personal Storage Folders (.pst files), when they hit the storage limit. 
Between 2012 and 2013, the storage limits were increased to 5GB. 

IRM uses the State Messaging and Archival Retrieval Tool (SMART) to archive record emails. 
The system was impleme nted in phase s between 2008 and 2010 and replaced CableXpress for archiving 

cables and record email s.| noted that communications sent to an embassy are referred to as a 

cable and emails sent to a person are record emails. SMART requires the users to identify an email as 
meeting the record standard and then selecting the appropriate SMART tags within Outlook while 
composing the email. The period of retention for a SMART record is dependent on the tags selected by 
the user. 


use the 
nolicv.l 




p rovided that S/ES-IRM, also commonly referred to as the POEMS system, does not 
syst em to archive email records. They are instead obligated to follow the ‘print and file’ 
[further noted that records for senior officials are archived when they leave office. 


recommended contacting Deputy Assistant Secretary MARGERET (PEGGY) GRAFELD, 
Deputy Assistant Secretary for Global Information Services (A/GIS) for more information on this 
process. 

The Bureau of Intellig ence and Rese arch (INR) i s responsible for a dministering file mailbox es on 


the top secret network at DoS. 
be able to provide farther details on INR and the top secret mail system. 


provided that! 


telephone 202 


would 
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Date of transcription 09/22/20 1 5 


On September 2 1 , 20 1 5, 

Department of State (STATE), Office of Inspector General (OIG), Off! 


United States 



, ■ -- 1 igation s, 1700 

N. Mo ore Street, S uite 800. A rlington. VA 22209, office telephone 70 j) fax 703 | 

^ email addresq instate, g ov called the write r. Information Technology 

Specialist/Forensic Examiner (ITS/FE) of the Washington Field Office (WFO) 

Computer Analysis Response Team (CART). 


|to provi de general inf ormation regarding group of fifty (50) 
_ during his review of the Microsoft 


The writer asked 

email messages of interest that were found byj 

Outlook Personal Sto rage Folders Epst files, or “mailboxes”) for HUMA M. ABEDIN and 
CHERYL D. MILL$ P confirmed that the Federal Bureau of Investigation (FBI) 

Previously received a full copy of the two (2) mailboxes on a Lexar thumb drive provided by 
Jfrom STATE. 




stated that he performed a search across the email data for the words “Secret” 
OFORN” using a search Program called “Perceptive Search” and that the search returned 

Jbelieved that most of the search hits appeared within the 


and 

fifty documents of interest. 

metadata of Microsoft Word documents, which he identified as “Call Sheets,” or doc uments 


mcunituii Ui Mierosou worn uocumenis, wmcn ne laentinea as Call Sheets, or docur 
provided to the Secretary of State prior to attending briefings with foreign dignitaries.j_ 


believed the search hits appeared within the metadata of the documents and not within the actual 
content of th e documents. The identified documents were sent as attachments to emails. 
could not remember if there were also search hits within any email messages. 


believed that the documents may have been generated from a classified system 


and that at some point they may have been moved to an unclassified system. However, he was 
unsure whether the “Secret” and “NOFORN” marki ngs would ha ve been generated automatically 
by the system that was used to create the documents. |stated that STATE had not yet 

determined how the documents would have been marked with regard to classification. 


The writer requested thal |provide the FBI with the fil e names and Message- 

Digest algorithm 5 (MD5) hash values tor the files identified by STATE. advised that 


STATE was in the process of moving the email data onto a stand-alone computer within a 
Sensitive Compartmented Information Facility (SCIF) and that he anticipated this would happen 
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Continuation of h'D-302 of Telephone call with 


— - — V* J, V4V^iLVJiLr VC4-L.I yfiuij j ^ 

toward the end of the week ton or around September 7S 9fiistl 
coordinate with 
nai 


, On 09/21/2015 Pa ge 


I 


|stated that he would 
OIG, STATE, telephone 703- 


values ot 


=j 1 I l_ |utu, at it, telephone /Uj 

I email address] ^state.gov to obtain and provide the FBI with the MD5 hash 

the identified files and that he would contact the writer when this process was complete. 


bS 

bic 


/ 
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(U// FOU O) On June 23 2016 
telenhonicallv intervi ewed by Federal Bureau of 
Also present for the call wasl 


], date of birth[ 


nvestigation (FBI ) Spec ial Agent; | | 

bounsel | Attorney 


was 


and 

at 


1 ,aw After bein g advised of the identities of the interviewing agents and the purpose of the interview, 
provided the following information: 


. (U//FO 
was shipped hx 
April of 201 4[ 


1 


of 


had no new information regarding the whereabouts of the laptop that 
from Platte River Networks (PRN) to the Clinton Foundation in 


was not sure who the mailroom manager for th e Clinton Found ation was at 

confirmed 

Floor, New York, NY 


that time but offered to contact the foundation to inquire about the shipment.] 

that the address of the Clinton Foundation was 1271 Avenue of the Americas, 42‘ 

10020. 


b6 

b7C 


b6 

b7C 



during the call and agreed to check her personal records for any relevant information. 


(U// rOUO ) A copy of the original interview notes and the referenced email are attached in a 1 A 
envelope. 


at 
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Date of transcription 10/27/2015 


On October 27, 2015, | a Special Agent with 

Homeland Security Investigations (HSI ) , Depar tment of Homeland 
Security (DHS) , Norfolk Virginia, (757) was interviewed at 

the Norfolk Federal Building. After being advised of the iden tity of 
the interviewing Agent and the nature of the interview, 
provided the following information: 


was previously employed as an Agent at the Department of 
State, Bureau of Diplomatic Security (DS) , and assigned to f ormer 
Secretary of State Rice's personal protection detail from until 


January 2009. In Januar y 2009 h e was reassigned to former Secret ary of 


State Clinton's detail. 


| [tfhen he left the Department of State. 


served on Clinton's detail until 


Clinton's tenure at State brought about significant changes to 
established security and diplomatic protocols owing to the di ssimilar 
management styles and attitudes between Rice and Clinton. 


claimed that his time on Clinton's detail was short and that he had no 
information to offer with regard to security violations or mish andling 
of classified information on the part of Clinton or her staff. 


advised his recollections were vague regarding his time on Clinton' s 
detail ^ and that he could not recall specific events with clarity. 

was aware that a Blackberry phone was kept in a desk drawer in 


Clinton' s SCIF but could not say with any degree of certainty that the 
phone belonged to Clinton or that storing it in the SCTF was a 


security violation. 


provided the name . of 


a former ASAC on Clinton' s security deta jl as F| nmenne who may be in a 
position to provide addit ional insight, 
the current whereabouts of 


was not familiar with 
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On November 6, 2015, 


Senior Special Agent, 


Office of Investigations, Offic e of the Insp ector G eneral fOIGl United States Department of State 


(STATE)' of fice telephone 70: 

lS.state.gov cabl ed the writer. 

(ITS/FEj' 


cell 202 


email address 


nformation Technology Specialist/Forensic Examiner 
f the Washington Field Office (WFO) Federal Bureau of Investigation 


(FBI) Computer Analysis Response Team (CART). 


|stated that he located an email containing content from a “confidential cable” 
sent from a Microsoft “Hotmail” email account to the STATE email address for Huma Abedin 
(AbedinH@state.gov) that could be found in the data contained within evidence item 1B26 
provided by STATE to the FBI on or around August 14, 2015. Evidence item IB26 is further 
described as a white and grey Lexar II SB 3.0 thum b drive labeled with a sticker containing the 
words "Dept of State 703-312-3856." |stated that when the email was received in 201 1, 

the information was classified and that it was supposed to be declassified in 2013 but that he did 
not know if that was the case and did not know the current classification of the document. 


On November 6 


,2015[ 


sent the writer an email containing information to assist 

in locating the identified email in the FBI data set in evidence item 1B26. A copy of the email is 
included in a 1 A envelope. 
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